Buffer overflow in X.org Libxi

CVE-2013-1995

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.

Vulnerability class: Buffer Overflow

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

Affected products

  • X.org Libxi — versions 1.5.0, 1.5.99.2, 1.5.99.3
  • N/a — versions n/a

Weakness classification (CWE)

References