X.org Libxv vulnerabilities

2 CVEs affecting X.org Libxv, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5407, published 2016-12-13.

More from X.org.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-5407, published 2016-12-13. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length…
• CVE-2013-2066, published 2013-06-15. Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days. Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the…