CVE-2025-49179
BaseFortify
Publication date: 2025-06-17
Last updated on: 2025-12-11
Assigner: Red Hat, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-190 | The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-49179 is an integer overflow vulnerability in the X Record extension of the xorg-x11-server-Xwayland component, specifically in the tigervnc implementation. The function RecordSanityCheckRegisterClients does not properly validate client-supplied values when computing request length, allowing a malicious client to bypass length checks by triggering an integer overflow. This can lead to memory corruption. [1]
How can this vulnerability impact me? :
This vulnerability can allow a malicious client to cause memory corruption on affected Linux systems running the vulnerable software. This could potentially lead to denial of service or other unintended behavior, impacting system stability and security. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should update the xorg-x11-server-Xwayland component to a patched version provided by your Linux distribution vendor as soon as possible. Since the vulnerability affects all Linux operating systems running the affected software, applying vendor security updates or patches addressing CVE-2025-49179 is the recommended immediate step. Additionally, consider restricting access to the X Record extension or tigervnc services to trusted clients only until the patch is applied. [1]