High severity7.8NVD Advisory· Published Feb 25, 2025· Updated Apr 6, 2026

CVE-2025-26595

Description

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tigervnc/Tigervnc
cpe:2.3:a:tigervnc:tigervnc:-:*:*:*:*:*:*:*
Xorg/Xserver
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*
Range: <21.1.16
Xorg/Xwayland
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*
Range: <24.1.6
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Xorg/X.orgllm-fuzzy
osv-coords60 versions
pkg:rpm/almalinux/tigervnc pkg:rpm/almalinux/tigervnc-icons pkg:rpm/almalinux/tigervnc-license pkg:rpm/almalinux/tigervnc-selinux pkg:rpm/almalinux/tigervnc-server pkg:rpm/almalinux/tigervnc-server-minimal pkg:rpm/almalinux/tigervnc-server-module pkg:rpm/almalinux/xorg-x11-server-common pkg:rpm/almalinux/xorg-x11-server-devel pkg:rpm/almalinux/xorg-x11-server-source pkg:rpm/almalinux/xorg-x11-server-Xdmx pkg:rpm/almalinux/xorg-x11-server-Xephyr pkg:rpm/almalinux/xorg-x11-server-Xnest pkg:rpm/almalinux/xorg-x11-server-Xorg pkg:rpm/almalinux/xorg-x11-server-Xvfb pkg:rpm/almalinux/xorg-x11-server-Xwayland pkg:rpm/almalinux/xorg-x11-server-Xwayland-devel pkg:rpm/opensuse/libxkbfile&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/libxkbfile&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/xwayland&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xwayland&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libxkbfile&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/libxkbfile&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/libxkbfile&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/libxkbfile&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/xwayland&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6
< 1.14.1-1.el9_5.1+ 59 more
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 23.2.7-3.el9_6
- (no CPE)range: < 23.2.7-3.el9_6
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.1.3-2.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 21.1.15-2.1
- (no CPE)range: < 24.1.1-150600.5.9.1
- (no CPE)range: < 24.1.5-2.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.8-12.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.8-12.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.0.9-150000.3.3.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 1.19.6-10.80.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 1.19.6-10.80.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 24.1.1-150600.5.9.1

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2025:2500nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2502nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2861nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2862nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2865nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2866nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2873nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2874nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2875nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2879nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2880nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2025-26595nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue Tracking
access.redhat.com/errata/RHSA-2025:3976nvd
access.redhat.com/errata/RHSA-2025:7163nvd
access.redhat.com/errata/RHSA-2025:7165nvd
access.redhat.com/errata/RHSA-2025:7458nvd
lists.debian.org/debian-lts-announce/2025/02/msg00036.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000