CVE-2025-26595

7.8 HIGH
Published: February 25, 2025 Modified: November 03, 2025

Description

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2500
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2502
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2861
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2862
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2865
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2866
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2873
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2874
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2875
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2879
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2880
Source: secalert@redhat.com
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-26595
Source: secalert@redhat.com
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2345257
Source: secalert@redhat.com
Issue Tracking

17 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.8 / 10.0
EPSS (Exploit Probability)
0.1%
16th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

tigervnc redhat x.org