CVE-2025-49178 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in Xorg-x11-server-xwayland Affecting Tigervnc Two vulnerabilities, CVE-2025-49175 and CVE-2025-49178, have been reported in the Xorg-x11-server-xwayland component affecting Tigervnc. Both vulnerabilities were published on June 17, 2025, and involve issues related to client requests and data handling. 3 sources 39