CVE Catalog
CVE-2016-5407
CriticalSummary
The XvQueryAdaptors and XvQueryEncodings functions in libXv before version 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to memory, potentially leading to system crashes or execution of malicious code.
Recommendation
It is recommended to update libXv to version 1.0.11 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.