Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84845.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-84845
Upstream
  • CVE-2026-34003
Published
2026-04-23T16:16:24Z
Modified
2026-08-28T17:47:57Z
Summary
CVE-2026-34003 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-4
Details

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

References

Affected packages

Azure Linux:3 / xorg-x11-server-Xwayland

Package

Name
xorg-x11-server-Xwayland
Purl
pkg:rpm/azure-linux/xorg-x11-server-Xwayland

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
24.1.6-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84845.json"