60
CVE-2016-5407
—CVSS 3.0
9.8 critical
EPSS
5%p91
Published
()
Modified
Description
The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
- Vendors
- x.orgfedoraproject
- Products
- libxv, fedora
- Weakness
- CWE-119, CWE-125
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H