← Database

CVE-2025-26594

HIGH CVSS: 7.8 Published: 2025-02-25 Modified: 2026-06-29

Description

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.

Affected Platforms

Redhat Enterprise LinuxTigervnc TigervncX.Org X ServerX.Org Xwayland

Weakness Type

CWE-416, CWE-416

References