CVE-2024-31083

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-31083
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-31083.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-31083
Downstream
AZL (2)
BELL (1)
CGA (2)
CLSA (1)
DEBIAN (1)
MGASA (1)
OESA (3)
openSUSE (2)
RHSA (16)
RLSA (6)
SUSE (8)
UBUNTU (1)
Related
ALSA (7)
openSUSE (2)
RLSA (1)
SUSE (8)
Published
2024-04-05T12:04:49Z
Modified
2026-10-21T02:51:24Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Xorg-x11-server: use-after-free in procrenderaddglyphs
Details

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-416"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31083.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:1.1.0-25.el6_10.13"
                        },
                        {
                            "fixed":  "0:1.20.4-29.el7_9"
                        },
                        {
                            "fixed":  "0:1.8.0-33.el7_9"
                        },
                        {
                            "fixed":  "0:1.13.1-2.el8_9.10"
                        },
                        {
                            "fixed":  "0:1.20.11-23.el8_10"
                        },
                        {
                            "fixed":  "0:1.13.1-10.el8_10"
                        },
                        {
                            "fixed":  "0:21.1.3-16.el8_10"
                        },
                        {
                            "fixed":  "0:1.9.0-15.el8_2.11"
                        },
                        {
                            "fixed":  "0:1.9.0-15.el8_2.11"
                        },
                        {
                            "fixed":  "0:1.9.0-15.el8_2.11"
                        },
                        {
                            "fixed":  "0:1.11.0-8.el8_4.10"
                        },
                        {
                            "fixed":  "0:1.11.0-8.el8_4.10"
                        },
                        {
                            "fixed":  "0:1.11.0-8.el8_4.10"
                        },
                        {
                            "fixed":  "0:1.12.0-6.el8_6.11"
                        },
                        {
                            "fixed":  "0:1.12.0-15.el8_8.10"
                        },
                        {
                            "fixed":  "0:1.13.1-8.el9_4.3"
                        },
                        {
                            "fixed":  "0:23.2.7-1.el9"
                        },
                        {
                            "fixed":  "0:1.20.11-26.el9"
                        },
                        {
                            "fixed":  "0:1.11.0-22.el9_0.11"
                        },
                        {
                            "fixed":  "0:1.12.0-14.el9_2.8"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.freedesktop.org/xorg/xserver

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/xorg/xserver
Events
Introduced
101caa1b03bc26b718f4618eb24104add5d14a4b
Last Affected
101caa1b03bc26b718f4618eb24104add5d14a4b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "21.1.12"
                },
                {
                    "last_affected":  "21.1.12"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

21.*
21.1.12
xorg-server-21.*
xorg-server-21.1.12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-31083.json"