Skip to content
OpenAdvisories
High · 7.8 CVE-2025-49180 EUVD-2025-18511GHSA-gpcr-p5wh-5x85

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

Published Jun 17, 2025 · Updated Nov 4, 2026 · Assigned by redhat

Vendor: Red Hat Vendor: X.Org Product: Red Hat Enterprise Linux 10 Product: Red Hat Enterprise Linux 6 Product: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION Product: Red Hat Enterprise Linux 7 Extended Lifecycle Support Product: Red Hat Enterprise Linux 7.7 Advanced Update Support Product: Red Hat Enterprise Linux 8 Product: Red Hat Enterprise Linux 8.2 Advanced Update Support Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Product: Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Product: Red Hat Enterprise Linux 8.6 Telecommunications Update Service Product: Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On Product: Red Hat Enterprise Linux 8.8 Telecommunications Update Service Product: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 9 Product: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 9.4 Extended Update Support Product: xwayland Package: xorg-server Package: xorg-server Package: xorg-server Package: xorg-server-hwe-16.04 Package: xorg-server-hwe-18.04 Package: xorg-x11-server Package: xorg-x11-server-Xwayland Package: xwayland Package: xwayland Package: xwayland Platform: Linux Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

Affected products

VendorProductAffectedFixed
X.Org xwayland < 24.1.7 24.1.7
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION — —
Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support — —
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support — —
Red Hat Red Hat Enterprise Linux 6 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 xorg-server 2:21.1.16-1.2 —
Debian 14 xwayland 2:24.1.8-1 —
Debian 13 xorg-server 2:21.1.16-1.2 —
Debian 13 xwayland No fix yet —
Debian 12 xorg-server 2:21.1.7-3+deb12u10 DSA-5947-1
Debian 12 xwayland No fix yet —
Debian 11 xorg-server 2:1.20.11-1+deb11u16 DLA-4230-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS xorg-server 2:21.1.18-1ubuntu1 —
Ubuntu 26.04 LTS xwayland 2:24.1.6-1ubuntu1 —
Ubuntu 25.10 xorg-server 2:21.1.18-1ubuntu1 —
Ubuntu 25.10 xwayland 2:24.1.6-1ubuntu1 —
Ubuntu 24.04 LTS xorg-server 2:21.1.12-1ubuntu1.4 USN-7573-1
Ubuntu 24.04 LTS xwayland 2:23.2.6-1ubuntu0.6 USN-7573-1
Ubuntu 22.04 LTS xorg-server 2:21.1.4-2ubuntu1.7~22.04.15 USN-7573-1
Ubuntu 22.04 LTS xwayland 2:22.1.1-1ubuntu0.19 USN-7573-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS xorg-server 2:1.20.13-1ubuntu1~20.04.20+esm1 USN-7573-2
Ubuntu Pro 18.04 LTS xorg-server 2:1.19.6-1ubuntu4.15+esm13 USN-7573-2
Ubuntu Pro 18.04 LTS xorg-server-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.11+esm5 USN-7573-2
Ubuntu Pro 16.04 LTS xorg-server 2:1.18.4-0ubuntu0.12+esm18 USN-7573-2
Ubuntu Pro 16.04 LTS xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.6+esm10 USN-7573-2
Ubuntu Pro 14.04 LTS xorg-server No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 xorg-x11-server-Xwayland +1 24.1.5-4.el10_0 RHSA-2025:9304
RHEL 9 tigervnc +6 1.14.1-8.el9_6 RHSA-2025:9306
RHEL 9 xorg-x11-server +8 1.20.11-31.el9_6 RHSA-2025:9303
RHEL 9 xorg-x11-server-Xwayland +1 23.2.7-4.el9_6 RHSA-2025:9303
RHEL 8 tigervnc +6 1.15.0-7.el8_10 RHSA-2025:9392
RHEL 8 xorg-x11-server +8 1.20.11-26.el8_10 RHSA-2025:9305
RHEL 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 RHSA-2025:9305
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS tigervnc +6 1.13.1-8.el9_4.7 RHSA-2025:10374
RHEL 9.4 EUS xorg-x11-server +8 1.20.11-26.el9_4 RHSA-2025:10351
RHEL 9.4 EUS xorg-x11-server-Xwayland 22.1.9-6.el9_4 RHSA-2025:10258
RHEL 9.2 E4S tigervnc +6 1.12.0-14.el9_2.12 RHSA-2025:10410
RHEL 9.2 E4S xorg-x11-server +6 1.20.11-18.el9_2 RHSA-2025:10350
RHEL 9.2 E4S xorg-x11-server-Xwayland 21.1.3-8.el9_2 RHSA-2025:10347
RHEL 9.0 E4S tigervnc +6 1.11.0-22.el9_0.15 RHSA-2025:10381
RHEL 9.0 E4S xorg-x11-server +6 1.20.11-11.el9_0 RHSA-2025:10352
RHEL 9.0 E4S xorg-x11-server-Xwayland 21.1.3-3.el9_0 RHSA-2025:10348
RHEL 8.8 TUS tigervnc +6 1.12.0-15.el8_8.14 RHSA-2025:10355
RHEL 8.8 TUS xorg-x11-server +6 1.20.11-16.el8_8 RHSA-2025:10343
RHEL 8.8 TUS xorg-x11-server-Xwayland 21.1.3-11.el8_8 RHSA-2025:10370
RHEL 8.8 EUS Long Life xorg-x11-server +6 1.20.11-16.el8_8 RHSA-2025:10343
RHEL 8.8 EUS Long Life xorg-x11-server-Xwayland 21.1.3-11.el8_8 RHSA-2025:10370
RHEL 8.8 E4S tigervnc +6 1.12.0-15.el8_8.14 RHSA-2025:10355
RHEL 8.8 E4S xorg-x11-server +6 1.20.11-16.el8_8 RHSA-2025:10343
RHEL 8.8 E4S xorg-x11-server-Xwayland 21.1.3-11.el8_8 RHSA-2025:10370
RHEL 8.6 TUS tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 TUS xorg-x11-server +6 1.20.11-5.el8_6.3 RHSA-2025:10356
RHEL 8.6 TUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.6 EUS Long Life tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 EUS Long Life xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.6 E4S tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 E4S xorg-x11-server +6 1.20.11-5.el8_6.3 RHSA-2025:10356
RHEL 8.6 E4S xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.6 AUS tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 AUS xorg-x11-server +6 1.20.11-5.el8_6.3 RHSA-2025:10356
RHEL 8.6 AUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.4 EUS Long Life tigervnc +6 1.11.0-8.el8_4.13 RHSA-2025:10349
RHEL 8.4 EUS Long Life xorg-x11-server +7 1.20.10-2.el8_4 RHSA-2025:10342
RHEL 8.4 AUS tigervnc +6 1.11.0-8.el8_4.13 RHSA-2025:10349
RHEL 8.4 AUS xorg-x11-server +7 1.20.10-2.el8_4 RHSA-2025:10342
RHEL 8.2 AUS tigervnc +6 1.9.0-15.el8_2.14 RHSA-2025:10378
RHEL 8.2 AUS xorg-x11-server +7 1.20.6-4.el8_2 RHSA-2025:9964
RHEL 7.7 AUS tigervnc +6 1.8.0-17.el7_7.1 RHSA-2025:10376
RHEL 7 ELS tigervnc +6 1.8.0-36.el7_9.2 RHSA-2025:10375
RHEL 7 ELS xorg-x11-server +9 1.20.4-32.el7_9 RHSA-2025:10360
RHEL 6 ELS tigervnc +3 1.1.0-25.el6_10.1 RHSA-2025:10377

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 xorg-x11-server-Xwayland +1 24.1.5-4.el10_0 ALSA-2025:9304
AlmaLinux 9 tigervnc +6 1.14.1-8.el9_6 ALSA-2025:9306
AlmaLinux 9 xorg-x11-server-Xdmx +7 1.20.11-31.el9_6 ALSA-2025:9303
AlmaLinux 9 xorg-x11-server-Xwayland +1 23.2.7-4.el9_6 ALSA-2025:9303
AlmaLinux 8 tigervnc +6 1.15.0-7.el8_10 ALSA-2025:9392
AlmaLinux 8 xorg-x11-server-Xdmx +7 1.20.11-26.el8_10 ALSA-2025:9305
AlmaLinux 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 ALSA-2025:9305

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 xorg-x11-server-Xwayland 24.1.5-4.el10_0 RLSA-2025:9304
Rocky Linux 9 tigervnc 1.14.1-8.el9_6 RLSA-2025:9306
Rocky Linux 9 xorg-x11-server 1.20.11-31.el9_6 RLSA-2025:9303
Rocky Linux 9 xorg-x11-server-Xwayland 23.2.7-4.el9_6 RLSA-2025:9303
Rocky Linux 8 tigervnc 1.15.0-7.el8_10 RLSA-2025:9392
Rocky Linux 8 xorg-x11-server 1.20.11-26.el8_10 RLSA-2025:9305
Rocky Linux 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 RLSA-2025:9305
ReleasePackageFixed inAdvisory
SLES 15 SP7 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01981-1, SUSE-SU-2025:01977-1
SLES 15 SP7 xwayland 24.1.5-150700.3.3.1 SUSE-SU-2025:01975-1
SLES 15 SP6 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01980-1, SUSE-SU-2025:01977-1
SLES 15 SP6 xwayland 24.1.1-150600.5.12.1 SUSE-SU-2025:01974-1
SLES 15 SP5 xorg-x11-server 21.1.4-150500.7.35.1 SUSE-SU-2025:01979-1
SLES 15 SP4 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SLES 15 SP3 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 xorg-x11-server 1.19.6-10.83.1 SUSE-SU-2025:02012-1
SLES for SAP 15 SP5 xorg-x11-server 21.1.4-150500.7.35.1 SUSE-SU-2025:01979-1
SLES for SAP 15 SP4 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SLES for SAP 15 SP3 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
SLE HPC 15 SP5 xorg-x11-server 21.1.4-150500.7.35.1 SUSE-SU-2025:01979-1
SLE HPC 15 SP4 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SLE HPC 15 SP3 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
SUSE Manager Server 4.3 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SUSE Manager Proxy 4.3 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SUSE Enterprise Storage 7.1 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xorg-x11-server 21.1.15-6.1 openSUSE-SU-2025:15310-1
openSUSE Tumbleweed xwayland 24.1.8-1.1 openSUSE-SU-2025:15311-1
openSUSE Leap 15.6 xorg-x11-server 21.1.11-150600.5.12.1 SUSE-SU-2025:01980-1
openSUSE Leap 15.6 xwayland 24.1.1-150600.5.12.1 SUSE-SU-2025:01974-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xorg-server 21.1.17-r0 —
Alpine v3.24 xwayland 24.1.7-r0 —
Alpine v3.23 xorg-server 21.1.17-r0 —
Alpine v3.23 xwayland 24.1.7-r0 —
Alpine v3.22 xorg-server 21.1.17-r0 —
Alpine v3.22 xwayland 24.1.7-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 tigervnc +6 1.14.1-3.amzn2023.0.2 ALAS2023-2025-1060
Amazon Linux 2023 xorg-x11-server-Xorg +6 21.1.13-5.amzn2023.0.6 ALAS2023-2025-1061
Amazon Linux 2023 xorg-x11-server-Xwayland +1 24.1.3-1.amzn2023.0.2 ALAS2023-2025-1062
Amazon Linux 2 tigervnc +6 1.8.0-24.amzn2.0.6 ALAS2-2025-2917
Amazon Linux 2 xorg-x11-server-Xdmx +8 1.20.4-22.amzn2.0.9 ALAS2-2025-2918

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 xorg-x11-server No fix yet —
Azure Linux 3 xorg-x11-server-Xwayland 24.1.6-2 —
Azure Linux 2 (CBL-Mariner) xorg-x11-server 1.20.10-16 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 xorg-x11-server-Xwayland +1 24.1.5-4.el10_0 ELSA-2025-9304
Oracle Linux 9 tigervnc +6 1.14.1-8.el9_6 ELSA-2025-9306
Oracle Linux 9 xorg-x11-server-Xdmx +7 1.20.11-31.el9_6 ELSA-2025-9303
Oracle Linux 9 xorg-x11-server-Xwayland +1 23.2.7-4.el9_6 ELSA-2025-9303
Oracle Linux 8 tigervnc +6 1.15.0-7.el8_10 ELSA-2025-9392
Oracle Linux 8 xorg-x11-server-Xdmx +7 1.20.11-26.el8_10 ELSA-2025-9305
Oracle Linux 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 ELSA-2025-9305
Oracle Linux 7 tigervnc +6 1.8.0-33.0.7.el7_9 ELSA-2025-10375
Oracle Linux 7 xorg-x11-server-Xdmx +8 1.20.4-29.0.3.el7_9 ELSA-2025-10360

Advisories 50

References