AZL-84630

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84630.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-84630

Upstream

CVE-2026-33999

Published

2026-04-23T16:16:24Z

Modified

2026-09-20T05:32:18Z

Summary

CVE-2026-33999 affecting package xorg-x11-server 1.20.10-6

Details

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-33999

Affected packages

Azure Linux:3 / xorg-x11-server

Package

Name: xorg-x11-server
Purl: pkg:rpm/azure-linux/xorg-x11-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.20.10-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84630.json"