cve/2023/CVE-2023-43787.md

CVE-2023-43787

Description

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

POC

Reference

• https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/

Github

• https://github.com/AWSXXF/xorg_mirror_libx11
• https://github.com/LingmoOS/libx11
• https://github.com/deepin-community/libx11
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/jfrog/jfrog-CVE-2023-43786-libX11_DoS