中文

// CVE · PUBLISHED 2026-05-05

CVE-2026-34000

Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support · Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support · +16

9.1 · CVSS 3.1Critical

Description

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.