VULNERABILITY INTELLIGENCE
CVE-2025-49180
CVSS score7.8 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2025-06-17
Last modified2026-06-30
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
Weakness classification
- secalert@redhat.com: CWE-190