Description
The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xorg-server | 2:1.9.0.901-1 | — |
| Debian 13 | xorg-server | 2:1.9.0.901-1 | — |
| Debian 12 | xorg-server | 2:1.9.0.901-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | xorg-x11-server +8 | 1.7.7-29.el6_1.2 | RHSA-2011:1359 |
| RHEL 5 | xorg-x11-server +7 | 1.1.1-48.76.el5_7.5 | RHSA-2011:1359 |
| RHEL 4 | xorg-x11 +17 | 6.8.2-1.EL.70 | RHSA-2011:1360 |
Advisories 2
- RHSA-2011:1359 Red Hat Security Advisory: xorg-x11-server security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1360 Red Hat Security Advisory: xorg-x11 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- [oss-security] 20110923 Re: CVE Request: X.org ProcRenderGlyps input sanitation issue mailing-list
- RHSA-2011:1359 vendor-advisory
- RHSA-2011:1360 vendor-advisory
- https://bugs.freedesktop.org/show_bug.cgi?id=28801
- http://cgit.freedesktop.org/xorg/xserver/commit/render/render.c?id=5725849a1b427cd4a72b84e57f211edb35838718
- http://aix.software.ibm.com/aix/efixes/security/X_advisory2.asc
- 1026149 vdb-entry
- [oss-security] 20110922 CVE Request: X.org ProcRenderGlyps input sanitation issue mailing-list