CVE-2013-1982: X Libxext

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.

Affected products

• X Libxext: up to and including 1.3.1; version 1.0.99.2 only; version 1.0.99.3 only; version 1.0.99.4 only; version 1.1 only; version 1.1.1 only; …

Published 2013-06-15. Last modified 2026-06-16.