← Database

CVE-2025-26600

HIGH CVSS: 7.8 Published: 2025-02-25 Modified: 2026-06-29

Description

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.

Affected Platforms

Redhat Enterprise LinuxTigervnc TigervncX.Org X ServerX.Org Xwayland

Weakness Type

CWE-416, CWE-416

References