CVE-2025-62231: Xorg: xmayland: value overflow in xkbsetcompatmap()
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
Other sources
Integer overflow vulnerability in the XkbSetCompatMap() function of the X.Org X server and Xwayland. The XkbCompatMap structure uses unsigned short values for some fields but fails to verify that input sums do not exceed the valid range. Crafted XkbSetCompatMap requests can trigger arithmetic overflow, potentially corrupting memory and causing the X server to crash.
— Red Hat
Xorg: xmayland: value overflow in xkbsetcompatmap()
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62231?
CVE-2025-62231 is rated as a high severity vulnerability due to the potential for exploitation via crafted input data.
How do I fix CVE-2025-62231?
To address CVE-2025-62231, update the X.Org X Server and Xwayland to the latest patched versions provided by your distribution.
Which software is affected by CVE-2025-62231?
CVE-2025-62231 affects both X.Org X Server and X.Org Xwayland implementations.
What can an attacker achieve with CVE-2025-62231?
An attacker exploiting CVE-2025-62231 could potentially execute arbitrary code or cause a denial of service due to the overflow condition.
Is there a workaround for CVE-2025-62231?
Currently, the recommended action for CVE-2025-62231 is to apply the security update since there are no effective workarounds.