The X.Org Big Requests extension contains a subtle integer‑overflow bug that can be triggered by specially crafted request lengths, allowing an attacker with the right access to bypass the size check, cause out‑of‑‑bounds memory access and crashes, and in some configurations produce memory...