CVE-2005-2495: XFREE86 Project XFREE86

Medium severity, CVSS 5.1. EPSS: 3.9% chance of exploitation in the next 30 days.

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

Affected products

• XFREE86 Project XFREE86: version 3.3.6 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.1.0 only; …

Published 2005-09-15. Last modified 2026-06-16.