A flaw was found in xorg-x11-server before 1.20.9. An... · CVE-2020-14346 · GitHub Advisory Database · GitHub

A flaw was found in xorg-x11-server before 1.20.9. An...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Aug 29, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

References

Published by the National Vulnerability Database

Sep 15, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Aug 29, 2025

Weaknesses

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Learn more on MITRE.

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result. Learn more on MITRE.