Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-93521

X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

Description

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

x.org xorg-x11-server

Default version status: unaffected

  • 0 to < 21.1.25affected

x.org xwayland

Default version status: unaffected

  • 0 to < 24.1.14affected

References