Record status Published
Identifier year (not publication year) 2024
Source publication Apr 5, 2024
Source updated Nov 20, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Xorg-x11-server: use-after-free in procrenderaddglyphs
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
xorg-x11-server
Vendor Unknown
Product Unknown
Platforms Unknown
Default status unaffected
Package xorg-x11-server
Package collection https://gitlab.freedesktop.org/xorg/xserver
xorg-x11-server · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
21.1.12 affectedUnavailable Unavailable Unavailable None listed
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Vendor Red Hat
Product Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.1.0-25.el6_10.13 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.4-29.el7_9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.8.0-33.el7_9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.13.1-2.el8_9.10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-23.el8_10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.13.1-10.el8_10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-16.el8_10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.2 Advanced Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.2 Advanced Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Advanced Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.9.0-15.el8_2.11 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.9.0-15.el8_2.11 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.9.0-15.el8_2.11 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.11.0-8.el8_4.10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.11.0-8.el8_4.10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.11.0-8.el8_4.10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-6.el8_6.11 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-15.el8_8.10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.13.1-8.el9_4.3 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:23.2.7-1.el9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-26.el9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.0 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.0 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.0 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.11.0-22.el9_0.11 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-14.el9_2.8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 10
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Platforms Unknown
Default status unaffected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Platforms Unknown
Default status unaffected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Platforms Unknown
Default status unaffected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 6
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Platforms Unknown
Default status unknown
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.