The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "libxv-dev-dbgsym": "2:1.0.10-1ubuntu0.16.04.1~esm1", "libxv-dev": "2:1.0.10-1ubuntu0.16.04.1~esm1", "libxv1-dbgsym": "2:1.0.10-1ubuntu0.16.04.1~esm1", "libxv1": "2:1.0.10-1ubuntu0.16.04.1~esm1", "libxv1-dbg": "2:1.0.10-1ubuntu0.16.04.1~esm1" } ] }