p PatchFirst

CVE-2006-1526

CVE-2006-1526

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory allocation due to a typo in an expression that uses a "&" instead of a "*" operator. NOTE: the subject line of the original announcement used an incorrect CVE number for this issue.

EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • xorg-server Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.0.2-8

    Update to 1:1.0.2-8

  • xorg-server Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.0.2-8

    Update to 1:1.0.2-8

  • xorg-server Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.0.2-8

    Update to 1:1.0.2-8

Original sources

Check your server →