CVE-2024-31081
CVSS 3.1 Score 7.3 of 10 (high)
Details
Summary
CVE-2024-31081 is a heap-based buffer over-read vulnerability identified in the X.org server's ProcXIPassiveGrabDevice() function. The issue arises when byte-swapped length values are used in replies, causing memory leakage and segmentation faults, especially when interacting with clients having different endianness. An attacker could potentially exploit this vulnerability by manipulating the X server into reading heap memory values and transmitting them back to the client until an unmapped page is encountered, leading to a crash. Although the attacker cannot directly control the memory copied into the replies, the small length values involved can result in significant attempted out-of-bounds reads.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions