Buffer overflow in X.org Libxi

CVE-2013-1998

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.

Vulnerability class: Buffer Overflow

EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.