CVE-2025-49180

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-49180
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-49180.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-49180
Downstream
AZL (3)
BELL (1)
CLSA (3)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (2)
RHSA (28)
RLSA (5)
SUSE (8)
UBUNTU (1)
Related
ALSA (5)
openSUSE (2)
SUSE (8)
Published
2025-06-17T15:00:18Z
Modified
2026-10-16T09:42:09Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
Details

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49180.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0:24.1.5-4.el10_0"
                        },
                        {
                            "fixed": "0:1.1.0-25.el6_10.1"
                        },
                        {
                            "fixed": "0:1.8.0-17.el7_7.1"
                        },
                        {
                            "fixed": "0:1.20.4-32.el7_9"
                        },
                        {
                            "fixed": "0:1.8.0-36.el7_9.2"
                        },
                        {
                            "fixed": "0:1.20.11-26.el8_10"
                        },
                        {
                            "fixed": "0:21.1.3-18.el8_10"
                        },
                        {
                            "fixed": "0:1.15.0-7.el8_10"
                        },
                        {
                            "fixed": "0:1.9.0-15.el8_2.14"
                        },
                        {
                            "fixed": "0:1.20.6-4.el8_2"
                        },
                        {
                            "fixed": "0:1.20.10-2.el8_4"
                        },
                        {
                            "fixed": "0:1.11.0-8.el8_4.13"
                        },
                        {
                            "fixed": "0:1.20.10-2.el8_4"
                        },
                        {
                            "fixed": "0:1.11.0-8.el8_4.13"
                        },
                        {
                            "fixed": "0:1.12.0-6.el8_6.14"
                        },
                        {
                            "fixed": "0:21.1.3-2.el8_6.4"
                        },
                        {
                            "fixed": "0:1.20.11-5.el8_6.3"
                        },
                        {
                            "fixed": "0:1.12.0-6.el8_6.14"
                        },
                        {
                            "fixed": "0:21.1.3-2.el8_6.4"
                        },
                        {
                            "fixed": "0:1.12.0-6.el8_6.14"
                        },
                        {
                            "fixed": "0:21.1.3-2.el8_6.4"
                        },
                        {
                            "fixed": "0:1.20.11-5.el8_6.3"
                        },
                        {
                            "fixed": "0:1.12.0-6.el8_6.14"
                        },
                        {
                            "fixed": "0:21.1.3-2.el8_6.4"
                        },
                        {
                            "fixed": "0:1.20.11-5.el8_6.3"
                        },
                        {
                            "fixed": "0:1.20.11-16.el8_8"
                        },
                        {
                            "fixed": "0:21.1.3-11.el8_8"
                        },
                        {
                            "fixed": "0:1.20.11-16.el8_8"
                        },
                        {
                            "fixed": "0:1.12.0-15.el8_8.14"
                        },
                        {
                            "fixed": "0:21.1.3-11.el8_8"
                        },
                        {
                            "fixed": "0:1.20.11-16.el8_8"
                        },
                        {
                            "fixed": "0:1.12.0-15.el8_8.14"
                        },
                        {
                            "fixed": "0:21.1.3-11.el8_8"
                        },
                        {
                            "fixed": "0:1.20.11-31.el9_6"
                        },
                        {
                            "fixed": "0:23.2.7-4.el9_6"
                        },
                        {
                            "fixed": "0:1.14.1-8.el9_6"
                        },
                        {
                            "fixed": "0:21.1.3-3.el9_0"
                        },
                        {
                            "fixed": "0:1.20.11-11.el9_0"
                        },
                        {
                            "fixed": "0:1.11.0-22.el9_0.15"
                        },
                        {
                            "fixed": "0:21.1.3-8.el9_2"
                        },
                        {
                            "fixed": "0:1.20.11-18.el9_2"
                        },
                        {
                            "fixed": "0:1.12.0-14.el9_2.12"
                        },
                        {
                            "fixed": "0:22.1.9-6.el9_4"
                        },
                        {
                            "fixed": "0:1.20.11-26.el9_4"
                        },
                        {
                            "fixed": "0:1.13.1-8.el9_4.7"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.freedesktop.org/xorg/xserver

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/xorg/xserver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
2c5e87e3dfecbd60bcad5b74cad2cdcf0a992b57
Fixed
3c3a4b767b16174d3213055947ea7f4f88e10ec6
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "24.1.7"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "3c3a4b767b16174d3213055947ea7f4f88e10ec6"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Other
DRI-XFree86-4_3_99_12-merge
DRI-trunk-20040613
DRI-trunk-20040721
DRM-1_0_5
DRM-20040613
DRM-20040721
DRM-20050615
DRM-20051017
DRM-2_0_0
Domain-base
Domain-sync1
Domain-sync2
Domain-sync3
Domain-sync4
MODULAR_COPY
PRE_xf86-4_3_0_1
XACE-SELINUX-MERGE
XORG-6_7_99_1
XORG-6_7_99_2
XORG-6_7_99_901
XORG-6_7_99_902
XORG-6_7_99_903
XORG-6_7_99_904
XORG-6_8_0
XORG-6_8_99_1
XORG-6_8_99_10
XORG-6_8_99_11
XORG-6_8_99_12
XORG-6_8_99_13
XORG-6_8_99_14
XORG-6_8_99_15
XORG-6_8_99_16
XORG-6_8_99_2
XORG-6_8_99_3
XORG-6_8_99_4
XORG-6_8_99_5
XORG-6_8_99_6
XORG-6_8_99_7
XORG-6_8_99_8
XORG-6_8_99_9
XORG-6_8_99_900
XORG-6_8_99_901
XORG-6_8_99_902
XORG-6_8_99_903
XORG-6_99_99_900
XORG-6_99_99_901
XORG-6_99_99_902
XORG-6_99_99_903
XORG-6_99_99_904
XORG-7_0
XORG-7_0_99_901
XORG-MAIN
add-Xi
ah-20021030
ah-20021030-postdri
before-mesa-4_0-import
dhd-20010328
dhd-20010817
dhd-20020916
dri-0-1-branchpoint
dri-20020129-merge
dri-20020222-merge
kdrive-initial-import
keithp
lg3d-base
pre-R651-import
pre-xgldrop-merge
sco_port_update-base
xf-3_9_16Z
xf-3_9_16Za
xf-3_9_16d
xf-3_9_16e
xf-3_9_16f
xf-3_9_17
xf-3_9_17Z
xf-3_9_17a
xf-3_9_17b
xf-3_9_17c
xf-3_9_17d
xf-3_9_17e
xf-3_9_17f
xf-3_9_18
xf-3_9_18Z
xf-3_9_18Za
xf-3_9_18a
xf-3_9_18b
xf-4_0
xf-4_0-bindist
xf-4_0Z
xf-4_0_1
xf-4_0_1-bindist
xf-4_0_1Z
xf-4_0_1Za
xf-4_0_1Zb
xf-4_0_1Zc
xf-4_0_1a
xf-4_0_1b
xf-4_0_1c
xf-4_0_1d
xf-4_0_1e
xf-4_0_1f
xf-4_0_1g
xf-4_0_1h
xf-4_0_2
xf-4_0_2-bindist
xf-4_0_99_1
xf-4_0_99_2
xf-4_0_99_3
xf-4_0_99_900
xf-4_0a
xf-4_0b
xf-4_0c
xf-4_0d
xf-4_0e
xf-4_0f
xf-4_0g
xf-4_1_99_1
xf-4_1_99_2
xf-4_1_99_3
xf-4_1_99_4
xf-4_1_99_5
xf-4_1_99_6
xf-4_1_99_7
xf-4_2-bp
xf-4_2_0
xf-4_2_0-bindist
xf-4_2_0-bindist-1
xf-4_2_0_1
xf-4_2_1
xf-4_2_1_1
xf-4_2_99_1
xf-4_2_99_2
xf-4_2_99_3
xf-4_2_99_4
xf-4_2_99_901
xf-4_2_99_902
xf-4_3_0
xf-4_3_0_1
xf-4_3_99_1
xf-4_3_99_2
xf-4_3_99_3
xf-4_3_99_4
xf-4_3_99_5
xf-4_3_99_6
xf86-012804-2330
xf86-4_3_0_1
xf86-4_3_99_16
xf86-4_3_99_901
xf86-4_3_99_902
xf86-4_3_99_903
xf86-4_3_99_903_special
xf86-4_4_0
xf86-4_4_99_1
xfixes_2_branchpoint
xorg-server-0_99_1
xorg-server-1_0_99_1
xorg-server-1_0_99_2
xorg-server-1_0_99_901
xorg-server-1_1_99_1
xorg-server-1_1_99_2
xorg-server-1.*
xorg-server-1.1.99.3
xorg-server-1.10.0
xorg-server-1.10.99.901
xorg-server-1.10.99.902
xorg-server-1.11.0
xorg-server-1.11.99.1
xorg-server-1.11.99.901
xorg-server-1.11.99.902
xorg-server-1.11.99.903
xorg-server-1.12.0
xorg-server-1.12.99.901
xorg-server-1.12.99.902
xorg-server-1.12.99.903
xorg-server-1.12.99.904
xorg-server-1.12.99.905
xorg-server-1.13.0
xorg-server-1.13.99.901
xorg-server-1.13.99.902
xorg-server-1.14.0
xorg-server-1.14.99.1
xorg-server-1.14.99.2
xorg-server-1.14.99.3
xorg-server-1.14.99.901
xorg-server-1.14.99.902
xorg-server-1.14.99.903
xorg-server-1.14.99.904
xorg-server-1.14.99.905
xorg-server-1.15.0
xorg-server-1.15.99.901
xorg-server-1.15.99.902
xorg-server-1.15.99.903
xorg-server-1.15.99.904
xorg-server-1.16.0
xorg-server-1.16.99.901
xorg-server-1.16.99.902
xorg-server-1.17.0
xorg-server-1.17.99.901
xorg-server-1.17.99.902
xorg-server-1.18.0
xorg-server-1.18.99.2
xorg-server-1.18.99.901
xorg-server-1.18.99.902
xorg-server-1.19.0
xorg-server-1.19.99.901
xorg-server-1.19.99.902
xorg-server-1.19.99.903
xorg-server-1.19.99.904
xorg-server-1.19.99.905
xorg-server-1.20.0
xorg-server-1.5.99.1
xorg-server-1.6.99.900
xorg-server-1.6.99.901
xorg-server-1.7.99.1
xorg-server-1.7.99.2
xorg-server-1.7.99.901
xorg-server-1.7.99.902
xorg-server-1.8.0
xorg-server-1.8.99.901
xorg-server-1.8.99.902
xorg-server-1.8.99.903
xorg-server-1.8.99.904
xorg-server-1.8.99.905
xorg-server-1.8.99.906
xorg-server-1.9.0
xorg-server-1.9.99.901
xorg-server-1.9.99.902
xorg-server-1.9.99.903
xorg-server-21.*
xorg-server-21.0.99.1
xwayland-24.*
xwayland-24.0.99.901
xwayland-24.0.99.902
xwayland-24.1.0
xwayland-24.1.1
xwayland-24.1.2
xwayland-24.1.3
xwayland-24.1.4
xwayland-24.1.5
xwayland-24.1.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-49180.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "93534291562234074253824366376775881751",
            "length": 2341
        },
        "id": "CVE-2025-49180-5bf7fc68",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.freedesktop.org/xorg/xserver@3c3a4b767b16174d3213055947ea7f4f88e10ec6",
        "target": {
            "file": "randr/rrproviderproperty.c",
            "function": "RRChangeProviderProperty"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "194768988713450811836250190315440550551",
                "259801243840285518273341431234864708370",
                "260996966317476473701047849113316208979"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-49180-b574a1af",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.freedesktop.org/xorg/xserver@3c3a4b767b16174d3213055947ea7f4f88e10ec6",
        "target": {
            "file": "randr/rrproviderproperty.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-16T09:42:09Z"