cve 2025 49176

CVE-2025-49176 is a security vulnerability in the X.Org Big Requests extension, part of the X11 window system. The flaw involves a subtle integer overflow that can be triggered by specially crafted request lengths. An attacker with appropriate access can bypass size checks, leading to out-of-bounds memory access, crashes, and in some configurations, memory corruption. Distributions and vendors have released patches to address this issue. Operators are advised to prioritize updates and implement network hardening to reduce exposure. This vulnerability affects systems running the X.Org server with the Big Requests extension enabled.