Wind River Support Network

HomeDefectsLIN1025-1734

Fixed

LIN1025-1734 : Security Advisory - xwayland - CVE-2025-49180

Created: Jun 17, 2025 Updated: Sep 21, 2025

Resolved Date: Aug 13, 2025

Found In Version: 10.25.33.1

Fix Version: 10.25.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.

CREATE(Triage):(User=lchen-cn) CVE-2025-49180 (https://nvd.nist.gov/vuln/detail/CVE-2025-49180)