CVE-2025-49180

—

CVSS 3.1

7.8 high

EPSS

<1%p24

Published

Jun 17, 2025 (Jun 17, 2025)

Modified

Jun 30, 2026

Description

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

Weakness: CWE-190
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.