CVE-2025-26597

Summary

CVE-2025-26597 is a buffer overflow vulnerability affecting X.Org and Xwayland. The issue lies in the XkbChangeTypesOfKey() function, which when called with a group value of 0, incorrectly resizes the key symbols table to 0 while leaving key actions unchanged. Subsequent calls to this function with a non-zero value of groups result in a buffer overflow due to the mismatch in sizes between the key symbols table and key actions. This vulnerability could potentially be exploited by attackers to execute arbitrary code or cause denial-of-service conditions. Users are encouraged to apply the relevant patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.