We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
Reserved 2025-06-03 | Published 2025-06-17 | Updated 2025-06-17 | Assigner redhat2025-06-03: | Reported to Red Hat. |
2025-06-17: | Made public. |
Red Hat would like to thank Julian Suleder and Nils Emmerich for reporting this issue.
access.redhat.com/security/cve/CVE-2025-49175
bugzilla.redhat.com/show_bug.cgi?id=2369947 (RHBZ#2369947)
Support options