AZL-64227

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-64227.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-64227

Upstream

CVE-2025-49180

Published

2025-06-17T15:15:46Z

Modified

2026-04-01T05:20:17.509462Z

Summary

CVE-2025-49180 affecting package xorg-x11-server for versions less than 1.20.10-16

Details

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-49180

Affected packages

Azure Linux:2 / xorg-x11-server

Package

Name: xorg-x11-server
Purl: pkg:rpm/azure-linux/xorg-x11-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20.10-16

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-64227.json"