CVE search · CVE-2025-62231
CVE-2025-62231
high 7.3
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- secalert@redhat.com
- Weakness
- CWE-190
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H |
secalert@redhat.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- x.org · x_server
- x.org · xwayland
- ibm · vios
- ibm · aix
- debian · debian_linux
- redhat · enterprise_linux
- redhat · enterprise_linux_aus
- redhat · enterprise_linux_els
- redhat · enterprise_linux_eus
- redhat · enterprise_linux_tus
- redhat · enterprise_linux_update_services_for_sap_solutions
References
- https://access.redhat.com/errata/RHSA-2025:19432Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19433Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19434Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19435Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19489Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19623Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:19909Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:20958Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:20960Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:20961Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:21035Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22040Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22041Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22051Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22055Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22056Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22077Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22096Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22164Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22167Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22364Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22365Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22426Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22427Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22667Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22729Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22742Third Party Advisory
- https://access.redhat.com/errata/RHSA-2025:22753Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0031Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0033Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0034Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0035Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:0036Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-62231Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2402660Issue TrackingThird Party Advisory
- https://lists.x.org/archives/xorg-announce/2025-October/003635.htmlMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2025/10/28/7Mailing ListPatch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00033.htmlMailing ListThird Party Advisory