X.org Libxrandr vulnerabilities

2 CVEs affecting X.org Libxrandr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-7948, published 2016-12-13.

More from X.org.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-7948, published 2016-12-13. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.
• CVE-2016-7947, published 2016-12-13. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.