CVE-2023-43787: Libx11: integer overflow in xcreateimage() leading to a heap overflow
Description
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
Classification
CVE ID: CVE-2023-43787
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 5.06% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://access.redhat.com/errata/RHSA-2024:2145https://access.redhat.com/errata/RHSA-2024:2973
https://access.redhat.com/security/cve/CVE-2023-43787
https://bugzilla.redhat.com/show_bug.cgi?id=2242254