CVE-2016-7943: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.

Affected products

• Fedoraproject Fedora: version 25 only
• X.org LIBX11: up to and including 1.6.3

Published 2016-12-13. Last modified 2026-06-17.