CVE-2025-49180

medium

Description

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2369981

https://access.redhat.com/security/cve/CVE-2025-49180

Details

Source: Mitre, NVD

Published: 2025-06-17

Updated: 2025-06-17

Risk Information

CVSS v2

Base Score: 5.2

Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H