What is CVE-2025-62231?

CVE-2025-62231 is a high-severity vulnerability in IBM Aix, classified under Integer Overflow or Wraparound. CVSS score: 7.3/10. Published 2025-10-30.

How severe is CVE-2025-62231?

High severity. CVSS v3 base score is 7.3 out of 10.

Integer overflow in IBM Aix

CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Vulnerability class: Integer Overflow

EPSS: 0.003 (19.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.

Affected products

Ibm Aix — versions 7.3.4
Ibm Vios — versions 4.1.2.0
X.org X_server
X.org Xwayland — versions 0
Debian Debian_linux — versions 11.0
Red Hat Enterprise Linux 10 — versions 0:24.1.5-5.el10_0, 0:24.1.5-5.el10_1
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 6 Extended Lifecycle Support - Extension — versions 0:1.1.0-25.el6_10.15
Red Hat Enterprise Linux 7 Extended Lifecycle Support — versions 0:1.20.4-33.el7_9, 0:1.8.0-36.el7_9.3
Red Hat Enterprise Linux 8 — versions 0:21.1.3-19.el8_10, 0:1.20.11-27.el8_10, 0:1.15.0-8.el8_10

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2025-62231?: CVE-2025-62231 is a high-severity vulnerability in IBM Aix, classified under Integer Overflow or Wraparound. CVSS score: 7.3/10. Published 2025-10-30.
How severe is CVE-2025-62231?: High severity. CVSS v3 base score is 7.3 out of 10.