CVE-2025-62231

No indexed exploits for CVE-2025-62231 yet

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Affected products: Alt Linux, Almalinux, Centos, Debian, Ibm Aix, Linuxmint, Red Hat, Rocky Linux
X.org X Server: < 21.1.19
X.org Xwayland: < 24.1.9

CVSS 3.1: 7.3 HIGH
EPSS: 0.3% (20th percentile)
Weakness: CWE-190
NVD status: Analyzed
Published: 2025-10-30

Workaround

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVE-2025-62231 at NVD

Authoritative description, scoring and affected products

No exploit for CVE-2025-62231 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.