CVE-2025-26595: Xorg: xwayland: buffer overflow in xkbvmodmasktext()
First published: Wed Feb 12 2025(Updated: )
A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/xorg-server | <=2:1.20.11-1+deb11u13<=2:21.1.7-3+deb12u8<=2:21.1.15-3 | 2:1.20.11-1+deb11u15 2:21.1.7-3+deb12u9 2:21.1.16-1 |
| debian/xwayland | <=2:22.1.9-1<=2:24.1.5-1 | 2:24.1.6-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2025-26595
- https://bugzilla.redhat.com/show_bug.cgi?id=2345257
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26595
- https://nvd.nist.gov/vuln/detail/CVE-2025-26595
- https://launchpad.net/bugs/cve/CVE-2025-26595
- https://security-tracker.debian.org/tracker/CVE-2025-26595
- https://ubuntu.com/security/CVE-2025-26595
- https://lists.x.org/archives/xorg-announce/2025-February/003584.html
- https://gitlab.freedesktop.org/xorg/xserver/-/commit/11fcda8753e994e15eb915d28cf487660ec8e722
Frequently Asked Questions
What is the severity of CVE-2025-26595?
CVE-2025-26595 is classified as a high-severity vulnerability due to the potential for remote code execution resulting from the buffer overflow.
How do I fix CVE-2025-26595?
To mitigate CVE-2025-26595, update to the latest patched versions of xorg-server or xwayland as specified in the vulnerability details.
What systems are affected by CVE-2025-26595?
CVE-2025-26595 affects systems running vulnerable versions of xorg-server and xwayland on Debian distributions.
Is CVE-2025-26595 exploitable remotely?
Yes, CVE-2025-26595 can be remotely exploitable if an attacker can send crafted input to the affected service.
What are the potential impacts of CVE-2025-26595?
The potential impacts of CVE-2025-26595 include system crashes, unauthorized access, and execution of arbitrary code.
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-26595
- collector/nvd-api
- source/NVD
- collector/usn-cve
- source/Ubuntu
- collector/nvd-cve
- agent/description
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/severity
- agent/last-modified-date
- agent/author
- agent/source
- agent/first-publish-date
- agent/softwarecombine
- agent/trending
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- package-manager/debian