CVE-2024-21885

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-21885
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-21885.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-21885
Downstream
Related
Published
2024-02-28T13:15:08Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.

References

Affected packages