60
CVE-2016-7942
—CVSS 3.0
9.8 critical
EPSS
4%p91
Published
()
Modified
Description
The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.
- Vendors
- fedoraprojectx.org
- Products
- fedora, libx11
- Weakness
- CWE-264, CWE-787
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H