CVE detail
CVE-2026-50264
An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 19.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
33 source links · newest first
- https://access.redhat.com/errata/RHSA-2026:46473access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:46392access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:46385access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:46460access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:46456access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:46382access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:46377access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:38810access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50264.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comJun 5, 2026, 12:16 PM - https://redhat.atlassian.net/browse/PSIRTSUPT-16950redhat.atlassian.net
No excerpt available.
Permissions Requiredredhat.atlassian.netJun 5, 2026, 12:16 PM No excerpt available.
Vendor Advisorylists.x.orgJun 5, 2026, 12:16 PM- https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7fgitlab.freedesktop.org
No excerpt available.
Exploitgitlab.freedesktop.orgJun 5, 2026, 12:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2485389bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/security/cve/CVE-2026-50264access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:38502access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36798access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36792access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36791access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36768access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36634access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36633access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36632access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36087access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36086access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36085access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:36083access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:29844access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:28923access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:26709access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:26610access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:26590access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:26566access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM - https://access.redhat.com/errata/RHSA-2026:26562access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 5, 2026, 12:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-26598CVSS 7.8 · High
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value,…
- CVE-2025-26596CVSS 7.8 · High
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap…
- CVE-2025-26595CVSS 7.8 · High
A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to…
- CVE-2024-0229CVSS 7.8 · High
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This…
- CVE-2024-0409CVSS 7.8 · High
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as priva…
- CVE-2023-5367CVSS 7.8 · High
A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XICha…