CVE-2025-26596

7.8

HIGHCVSS v3

Published

February 25, 2025

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.

TigerVNC/tigervnc

GitHubHigh performance, multi-platform VNC client and server

all versionsNVD

CendioOssman/tigervnc

GitHub

all versionsNVD

TigerVNC

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

## tigervnc TigerVNC is a high-performance, platform-neutral implementation of VNC (Virtual Network Computing), a client/server application that allows users to launch and interact with graphical applications on remote machines. TigerVNC provides the levels of performance necessary to run 3D and video applications, and it attempts to maintain a common look and feel and re-use components, where possible, across the various platforms that it supports. TigerVNC also provides extensions for advanced authentication methods and TLS encryption. ### Package-specific issue If this package isn't up-to-date for some days, [Create an issue](https://github.com/tunisiano187/Chocolatey-packages/issues/new/choose) Support the package maintainer and [![Patreon](https://cdn.jsdelivr.net/gh/tunisiano187/Chocolatey-packages@d15c4e19c709e7148588d4523ffc6dd3cd3c7e5e/icons/patreon.png)](https://www.patreon.com/bePatron?u=39585820)

all versionsNVD

tigervnc

NPMTigerVNC binaries as a node module

all versionsNVD

Security Advisories

CVE-2025-26596

Description

More on this CVE