CVE-2025-49177 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Xorg-x11-server-xwayland Affecting TigerVNC Three vulnerabilities have been identified in the Xorg-x11-server-xwayland related to TigerVNC. CVE-2025-49179 and CVE-2025-49176 involve integer overflow issues in the x record and big requests extensions, respectively, while CVE-2025-49177 pertains to a data leak in the xfixes extension. All vulnerabilities have been published with information available. 3 sources 35