ZDI-25-142: X.Org Server XkbVModMaskText Stack-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-26595.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-142?
The vulnerability ZDI-25-142 has been assigned a CVSS rating of 7.8, indicating a high severity level.
What type of vulnerability is ZDI-25-142?
ZDI-25-142 is a privilege escalation vulnerability affecting X.Org Server.
How can an attacker exploit ZDI-25-142?
An attacker can exploit ZDI-25-142 by first executing low-privileged code on the target system to gain elevated privileges.
Which software is affected by ZDI-25-142?
ZDI-25-142 affects installations of X.Org Server developed by the X.Org Foundation.
What mitigation steps should be taken for ZDI-25-142?
To mitigate ZDI-25-142, it is recommended to patch X.Org Server to the latest version that addresses this vulnerability.