Skip to content
Heist/ feed
Back to feed
High

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Type: advisorySources: OSV

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2024-9632
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 08:53 UTC · Revision 1

Source evidence

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

core-osv · Original source

Published 30 Oct 2024, 07:42 UTC

A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.

osv:CVE-2024-9632
Complete source record
{
  "id": "a95977ff19d42fbb04da2ffe3f30d758cddfb14e65645dfa207ae95923c6e008",
  "url": "https://osv.dev/vulnerability/CVE-2024-9632",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability",
    "summary": "A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.",
    "evidence": "osv:CVE-2024-9632",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2024-9632",
      "aliases": [
        "CVE-2024-9632"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://gitlab.freedesktop.org/xorg/xserver",
              "type": "GIT",
              "events": [
                {
                  "introduced": "69e99f58818201c32f000f3d65f8df071dc47e98"
                },
                {
                  "fixed": "b25ad9b8f0ebcc3ebe09ce9991410c60f3a8b2ce"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "1.1.1"
                      },
                      {
                        "fixed": "21.1.14"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  }
                ]
              }
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9632.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:50.365115841Z",
      "provider": "osv",
      "references": [
        "https://access.redhat.com/downloads/content/package-browser/",
        "https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html",
        "https://access.redhat.com/errata/RHSA-2024:10090",
        "https://access.redhat.com/errata/RHSA-2024:8798",
        "https://access.redhat.com/errata/RHSA-2024:9540",
        "https://access.redhat.com/errata/RHSA-2024:9579",
        "https://access.redhat.com/errata/RHSA-2024:9601",
        "https://access.redhat.com/errata/RHSA-2024:9690",
        "https://access.redhat.com/errata/RHSA-2024:9816",
        "https://access.redhat.com/errata/RHSA-2024:9818",
        "https://access.redhat.com/errata/RHSA-2024:9819",
        "https://access.redhat.com/errata/RHSA-2024:9820",
        "https://access.redhat.com/errata/RHSA-2024:9901",
        "https://access.redhat.com/errata/RHSA-2025:12751",
        "https://access.redhat.com/errata/RHSA-2025:7163",
        "https://access.redhat.com/errata/RHSA-2025:7165",
        "https://access.redhat.com/errata/RHSA-2025:7458",
        "https://access.redhat.com/security/cve/CVE-2024-9632",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9632.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-9632",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2317233",
        "https://gitlab.freedesktop.org/xorg/xserver/"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-122"
        ],
        "cna_assigner": "redhat",
        "unresolved_ranges": [
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "0:24.1.5-3.el10_0"
                  },
                  {
                    "fixed": "0:1.1.0-25.el6_10.13"
                  },
                  {
                    "fixed": "0:1.8.0-34.el7_9"
                  },
                  {
                    "fixed": "0:1.20.11-25.el8_10"
                  },
                  {
                    "fixed": "0:21.1.3-17.el8_10"
                  },
                  {
                    "fixed": "0:1.13.1-14.el8_10"
                  },
                  {
                    "fixed": "0:1.9.0-15.el8_2.12"
                  },
                  {
                    "fixed": "0:1.11.0-8.el8_4.11"
                  },
                  {
                    "fixed": "0:1.11.0-8.el8_4.11"
                  },
                  {
                    "fixed": "0:1.11.0-8.el8_4.11"
                  },
                  {
                    "fixed": "0:1.12.0-6.el8_6.12"
                  },
                  {
                    "fixed": "0:1.12.0-6.el8_6.12"
                  },
                  {
                    "fixed": "0:1.12.0-6.el8_6.12"
                  },
                  {
                    "fixed": "0:1.12.0-15.el8_8.11"
                  },
                  {
                    "fixed": "0:1.14.1-1.el9_5"
                  },
                  {
                    "fixed": "0:1.20.11-28.el9_6"
                  },
                  {
                    "fixed": "0:23.2.7-3.el9_6"
                  },
                  {
                    "fixed": "0:1.11.0-22.el9_0.12"
                  },
                  {
                    "fixed": "0:1.12.0-14.el9_2.9"
                  },
                  {
                    "fixed": "0:1.13.1-8.el9_4.4"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "InverseAffectedRanges"
              }
            ]
          }
        ],
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9632.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-9632",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 518816,
  "published_at": "2024-10-30T07:42:35.32+00:00"
}