CVE-2026-93521: X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running X.Org X Server before 2.1.25 or XWayland before 24.4.14 are affected if an authenticated X client can connect to the server.
What access does an attacker need to exploit it?
An attacker needs authenticated access as an X client. No user interaction is required after the attacker can send the crafted RandR ChangeProviderProperty request.
What could successful exploitation allow?
Successful exploitation could crash the X server or execute code in the X server context, affecting confidentiality, integrity, and availability.
How can I determine whether I am affected?
Check whether the system is running X.Org X Server earlier than 2.1.25 or XWayland earlier than 24.4.14. The affected request is RandR ChangeProviderProperty.