Description
Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) uniDRIOpenConnection and (2) uniDRIGetClientDriverName functions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | xserver-xorg-video-openchrome | 1:0.2.906-2+deb7u1 | — |
| Debian 7 | xserver-xorg-video-openchrome | 1:0.2.906-2+deb7u1 | DSA-2679-1 |
| Debian 6.0 | xserver-xorg-video-openchrome | 1:0.2.904+svn842-2+squeeze1 | DSA-2679-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | intel-gpu-tools +2 | 2.99.911-6.el6 | RHBA-2014:1376 |
| RHEL 6 | libdrm +1 | 2.4.52-4.el6 | RHBA-2014:1376 |
| RHEL 6 | libpciaccess +1 | 0.13.3-0.1.el6 | RHBA-2014:1376 |
| RHEL 6 | libwacom +2 | 0.8-1.el6 | RHBA-2014:1376 |
| RHEL 6 | mesa +14 | 10.1.2-2.el6 | RHBA-2014:1376 |
| RHEL 6 | mesa-private-llvm +1 | 3.4-3.el6 | RHBA-2014:1376 |
| RHEL 6 | pixman +1 | 0.32.4-4.el6 | RHBA-2014:1376 |
| RHEL 6 | xcb-util +1 | 0.3.6-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xcb-util-image +1 | 0.3.9-4.el6 | RHBA-2014:1376 |
| RHEL 6 | xcb-util-wm +3 | 0.3.9-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-apps | 7.7-6.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-acecad | 1.5.0-7.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-aiptek +1 | 1.4.1-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-apm +1 | 1.2.5-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-ast | 0.98.0-1.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-ati +1 | 7.3.99-2.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-cirrus | 1.5.2-2.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-dummy | 0.3.6-15.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-elographics | 1.4.1-3.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-evdev +1 | 2.8.2-4.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-fbdev | 0.4.3-16.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-fpit | 1.4.0-6.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-geode | 2.11.15-1.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-glint | 1.2.8-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-i128 +1 | 1.3.6-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-i740 | 1.3.4-11.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-keyboard | 1.8.0-1.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-mach64 | 6.9.4-8.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-mga | 1.6.3-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-modesetting | 0.8.0-14.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-mouse +1 | 1.9.0-1.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-mutouch | 1.3.0-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-neomagic | 1.2.7-7.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-nouveau | 1:1.0.10-1.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-nv | 2.1.20-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-openchrome +1 | 0.3.3-6.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-penmount | 1.5.0-5.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-qxl | 0.1.1-15.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-r128 | 6.9.1-8.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-rendition | 4.2.5-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-s3virge | 1.10.6-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-savage | 2.3.7-2.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-siliconmotion | 1.7.7-9.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-sis | 0.10.7-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-sisusb | 0.9.6-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-synaptics +1 | 1.7.6-1.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-tdfx | 1.4.5-10.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-v4l | 0.2.0-36.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-vesa | 2.3.2-15.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-vmmouse | 13.0.0-2.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-vmware | 13.0.1-9.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-void | 1.4.0-23.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-wacom +1 | 0.23.0-4.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-drv-xgi | 1.6.0-20.20121114git.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-glamor +1 | 0.6.0-5.20140506gitf78901e.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-server +8 | 1.15.0-22.el6 | RHBA-2014:1376 |
| RHEL 6 | xorg-x11-server-utils | 7.7-2.el6 | RHBA-2014:1376 |
Advisories 2
- RHBA-2014:1376 Red Hat Bug Fix Advisory: xcb-util, xorg-x11-drivers, and mesa bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2679-1 xserver-xorg-video-openchrome - several Debian Security (DSA / DLA) · Mar 9, 2026