ZDI-25-975: X.Org Server XkbSetCompatMap Numeric Truncation Error Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62231.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-975?
ZDI-25-975 has been assigned a CVSS rating of 7.8, indicating a high severity level.
How do I fix ZDI-25-975?
To fix ZDI-25-975, update your X.Org Server to the latest version provided by The X.Org Foundation.
Who is affected by ZDI-25-975?
ZDI-25-975 affects installations of X.Org Server, particularly where local attackers have low-privileged code execution capabilities.
Can ZDI-25-975 be exploited remotely?
No, ZDI-25-975 requires local access to the system to execute the vulnerability.
What type of vulnerability is ZDI-25-975?
ZDI-25-975 is a privilege escalation vulnerability that allows local attackers to gain higher-level access on the system.