libglvnd-gles (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package libglvnd-gles, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2020-25712 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation…
• CVE-2020-14345 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege…
• CVE-2020-14346 — CVSS 7.8 (high): A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead…
• CVE-2020-14362 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2020-14363 — CVSS 7.8 (high): An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an…
• CVE-2020-14360 — CVSS 7.8 (high): A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege…
• CVE-2020-14361 — CVSS 7.8 (high): A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a…
• CVE-2020-14344 — CVSS 6.7 (medium): An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version…
• CVE-2020-14347 — CVSS 5.5 (medium): A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases…