CVE-2016-7942: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.

Affected products

• Fedoraproject Fedora: version 25 only
• X.org LIBX11: up to and including 1.6.3

Published 2016-12-13. Last modified 2026-06-17.