CVE detail
CVE-2025-26597
A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
19 source links · newest first
No excerpt available.
Vendor Advisorylists.debian.orgFeb 25, 2025, 4:15 PM- http://www.openwall.com/lists/oss-security/2026/06/02/1www.openwall.com
No excerpt available.
Exploitwww.openwall.comFeb 25, 2025, 4:15 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2345255bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/security/cve/CVE-2025-26597access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7458access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7165access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7163access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:3976access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2880access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2879access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2875access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2874access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2873access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2866access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2865access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2862access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2861access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2502access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2500access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-26601CVSS 7.8 · High
A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requ…
- CVE-2025-26600CVSS 7.8 · High
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying t…
- CVE-2025-26599CVSS 7.8 · High
An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compR…
- CVE-2025-26598CVSS 7.8 · High
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value,…
- CVE-2025-26596CVSS 7.8 · High
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap…
- CVE-2025-26595CVSS 7.8 · High
A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to…