CVE-2016-7949: Input Validation
Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7949?
CVE-2016-7949 is considered to have high severity due to its potential for remote exploitation leading to arbitrary code execution.
How do I fix CVE-2016-7949?
To fix CVE-2016-7949, upgrade libXrender to version 0.9.10 or later on affected systems.
Which software is affected by CVE-2016-7949?
CVE-2016-7949 affects versions of libXrender prior to 0.9.10 on systems such as Debian and Fedora versions 24 and 25.
Who can exploit CVE-2016-7949?
CVE-2016-7949 can potentially be exploited by remote attackers with access to the X server.
What types of attacks can CVE-2016-7949 facilitate?
CVE-2016-7949 can facilitate attacks that result in out-of-bounds writes, leading to crashes or code execution.