VULNERABILITY INTELLIGENCE

CVE-2013-4396

CVSS score6.5 MEDIUM
EPSS probability4.08%
CISA KEVNot currently listed
Published2013-10-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.

Primary references