Improper input validation in X X.org-Xserver

CVE-2010-4819

The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.