CVE-2023-6478 HIGH

CVE-2023-6478: Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Vendor Red Hat

Product Red Hat Enterprise Linux 6

Weakness CWE-190

Published December 13, 2023

Last update November 20, 2025

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

Key dates

02Disclosure timeline

December 13, 2023 CVE published

November 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-6478 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/190.html

Related vulnerabilities

04Related CVE

CVE-2026-43908 OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder CVE-2026-47925 Acrobat Reader | Integer Overflow or Wraparound (CWE-190) CVE-2026-45592 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability CVE-2026-10118 Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication CVE-2026-7828 UltraVNC repeater integer overflow in win_log malloc leading to heap overflow