CVE detail
CVE-2025-26599
An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 29.4 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
18 source links · newest first
No excerpt available.
Vendor Advisorylists.debian.orgFeb 25, 2025, 4:15 PM- https://bugzilla.redhat.com/show_bug.cgi?id=2345253bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/security/cve/CVE-2025-26599access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7458access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7165access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:7163access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:3976access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2880access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2879access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2875access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2874access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2873access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2866access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2865access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2862access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2861access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2502access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM - https://access.redhat.com/errata/RHSA-2025:2500access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 25, 2025, 4:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-26601CVSS 7.8 · High
A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requ…
- CVE-2025-26600CVSS 7.8 · High
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying t…
- CVE-2025-26598CVSS 7.8 · High
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value,…
- CVE-2025-26597CVSS 7.8 · High
A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unch…
- CVE-2025-26596CVSS 7.8 · High
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap…
- CVE-2025-26595CVSS 7.8 · High
A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to…