CVE-2010-4819: X X.org-Xserver

Low severity, CVSS 3.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."

Affected products

• X X.org-Xserver: up to and including 1.7.7; version 1.7 only; version 1.7.6.902 only; version 1.7.7 only

Published 2012-09-05. Last modified 2026-06-16.