Record status Published
Identifier year (not publication year) 2026
Source publication Jun 5, 2026
Source updated Sep 28, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias target name length is 1024 bytes. A font alias name between 257 and 1023 bytes causes the X server to copy that name into the undersized stack buffer without further checks. This may be used to crash the server, or for privilege escalation if the X server runs as root.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat Enterprise Linux 10
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 10 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:24.1.9-4.el10_2.2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 10.0 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 10.0 Extended Update Support
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 10.0 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:24.1.5-6.el10_0.1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Vendor Red Hat
Product Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.1.0-25.el6_10.18 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Vendor Red Hat
Product Red Hat Enterprise Linux 7 Extended Lifecycle Support
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.4-35.el7_9 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Vendor Red Hat
Product Red Hat Enterprise Linux 7 Extended Lifecycle Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.8.0-36.el7_9.5 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-20.el8_10.2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-28.el8_10.2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.15.0-10.el8_10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.10-5.el8_4 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.11.0-8.el8_4.16 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.10-5.el8_4 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Vendor Red Hat
Product Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.11.0-8.el8_4.16 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-8.el8_6 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-2.el8_6.7 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-6.el8_6.18 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-8.el8_6 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-2.el8_6.7 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Vendor Red Hat
Product Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-6.el8_6.18 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-19.el8_8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-13.el8_8.1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-15.el8_8.18 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-19.el8_8 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-13.el8_8.1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-15.el8_8.18 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:24.1.9-4.el9_8.2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-34.el9_8.2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.15.0-7.el9_8.2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-21.el9_2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:21.1.3-10.el9_2.1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.12.0-14.el9_2.15 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-29.el9_4 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:22.1.9-8.el9_4.1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.13.1-8.el9_4.10 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.6 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.6 Extended Update Support
Platforms Unknown
Default status affected
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.6 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.20.11-34.el9_6 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.6 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.6 Extended Update Support
Platforms Unknown
Default status affected
Package xorg-x11-server-Xwayland
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.6 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:23.2.7-6.el9_6.1 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.6 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.6 Extended Update Support
Platforms Unknown
Default status affected
Package tigervnc
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.6 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:1.14.1-11.el9_6 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 6
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Platforms Unknown
Default status unknown
Package xorg-x11-server
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.