CVE-2023-43787

HIGH

libX11 - Memory Corruption

Title source: llm

Description

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

References (8)

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2024:2145

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2024:2973

[Third Party Advisory] https://access.redhat.com/security/cve/CVE-2023-43787

[Issue Tracking, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=2242254

[Various Sources] https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/

[Mailing List] https://lists.debian.org/debian-lts-announce/2023/10/msg00005.html

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20231103-0006/

[Mailing List] http://www.openwall.com/lists/oss-security/2024/01/24/9

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 12.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-190 CWE-122

Status published

Affected Products (4)

x.org/libx11 < 1.8.7

redhat/enterprise_linux

fedoraproject/fedora

Timeline

Published Oct 10, 2023

Tracked Since Feb 18, 2026