Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84839.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-84839
Upstream
  • CVE-2026-33999
Published
2026-04-23T16:16:24Z
Modified
2026-08-28T17:48:03Z
Summary
CVE-2026-33999 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-4
Details

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.

References

Affected packages

Azure Linux:3 / xorg-x11-server-Xwayland

Package

Name
xorg-x11-server-Xwayland
Purl
pkg:rpm/azure-linux/xorg-x11-server-Xwayland

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
24.1.6-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84839.json"