← Database

CVE-2022-2320

HIGH CVSS: 7.8 Published: 2022-09-01 Modified: 2026-06-17

Description

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to escalate privileges and execute arbitrary code in the context of root.

Affected Platforms

X.Org X Server

Weakness Type

CWE-787, CWE-787

References