A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
References
Configurations
No configuration.
History
07 Jul 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
23 Jun 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jun 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References |
|
17 Jun 2025, 20:50
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Jun 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-17 15:15
Updated : 2025-07-07 14:15
NVD link : CVE-2025-49175
Mitre link : CVE-2025-49175
CVE.ORG link : CVE-2025-49175
JSON object : View
Products Affected
No product.
CWE
CWE-125
Out-of-bounds Read