High severity7.8NVD Advisory· Published Feb 25, 2025· Updated Apr 6, 2026

CVE-2025-26598

Description

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tigervnc/Tigervnc
cpe:2.3:a:tigervnc:tigervnc:-:*:*:*:*:*:*:*
Xorg/Xserver
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*
Range: <21.1.16
Xorg/Xwayland2 versions
cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*range: <24.1.6
- (no CPE)
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Xorg/X.orgllm-fuzzy
osv-coords41 versions
pkg:rpm/almalinux/tigervnc pkg:rpm/almalinux/tigervnc-icons pkg:rpm/almalinux/tigervnc-license pkg:rpm/almalinux/tigervnc-selinux pkg:rpm/almalinux/tigervnc-server pkg:rpm/almalinux/tigervnc-server-minimal pkg:rpm/almalinux/tigervnc-server-module pkg:rpm/almalinux/xorg-x11-server-common pkg:rpm/almalinux/xorg-x11-server-devel pkg:rpm/almalinux/xorg-x11-server-source pkg:rpm/almalinux/xorg-x11-server-Xdmx pkg:rpm/almalinux/xorg-x11-server-Xephyr pkg:rpm/almalinux/xorg-x11-server-Xnest pkg:rpm/almalinux/xorg-x11-server-Xorg pkg:rpm/almalinux/xorg-x11-server-Xvfb pkg:rpm/almalinux/xorg-x11-server-Xwayland pkg:rpm/almalinux/xorg-x11-server-Xwayland-devel pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xorg-x11-server&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/xwayland&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xwayland&distro=openSUSE%20Tumbleweed pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/xwayland&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP6
< 1.14.1-1.el9_5.1+ 40 more
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.14.1-1.el9_5.1
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 1.20.11-28.el9_6
- (no CPE)range: < 23.2.7-3.el9_6
- (no CPE)range: < 23.2.7-3.el9_6
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 21.1.15-2.1
- (no CPE)range: < 24.1.1-150600.5.9.1
- (no CPE)range: < 24.1.5-2.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 21.1.11-150600.5.6.1
- (no CPE)range: < 1.19.6-10.80.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 21.1.4-150500.7.32.1
- (no CPE)range: < 1.19.6-10.80.1
- (no CPE)range: < 1.20.3-150200.22.5.102.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 1.20.3-150400.38.54.1
- (no CPE)range: < 24.1.1-150600.5.9.1

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2025:2500nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2502nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2861nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2862nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2865nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2866nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2873nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2874nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2875nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2879nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2880nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2025-26598nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue Tracking
access.redhat.com/errata/RHSA-2025:3976nvd
access.redhat.com/errata/RHSA-2025:7163nvd
access.redhat.com/errata/RHSA-2025:7165nvd
access.redhat.com/errata/RHSA-2025:7458nvd
lists.debian.org/debian-lts-announce/2025/02/msg00036.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000