CVE-2025-62231
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
40/100
Published: 2025-10-30
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
Low
A:
High
Description
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
Weakness Classification (1)
Affected Software (24)
| Vendor | Product | Version |
|---|---|---|
| X.Org | Xwayland | 0 < 24.1.9 |
| debian | debian_linux | 11.0 |
| ibm | aix | 7.2.5 – 7.2.5.12 |
| ibm | aix | 7.3.4 |
| ibm | vios | 4.1.0 – 4.1.1.30 |
| ibm | vios | 4.1.2.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
| redhat | enterprise_linux_aus | 8.2 |
| redhat | enterprise_linux_aus | 8.4 |
| redhat | enterprise_linux_aus | 8.6 |
| redhat | enterprise_linux_els | 6.0 |
| redhat | enterprise_linux_els | 7.0 |
| redhat | enterprise_linux_eus | 8.4 |
| redhat | enterprise_linux_eus | 9.4 |
| redhat | enterprise_linux_tus | 8.6 |
| redhat | enterprise_linux_tus | 8.8 |
| redhat | enterprise_linux_update_services_for_sap_solutions | 8.6 |
| redhat | enterprise_linux_update_services_for_sap_solutions | 8.8 |
| redhat | enterprise_linux_update_services_for_sap_solutions | 9.0 |
| redhat | enterprise_linux_update_services_for_sap_solutions | 9.2 |
| x.org | x_server | < 21.1.19 |
| x.org | xwayland | < 24.1.9 |
References & Advisories (38)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
Showing 25 of 38 references