CVE-2020-14346

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-191
• CWE-191

• https://bugzilla.redhat.com/show_bug.cgi?id=1862246Issue Tracking, Third Party Advisory
• https://lists.x.org/archives/xorg-announce/2020-August/003058.htmlMailing List, Patch, Vendor Advisory
• https://security.gentoo.org/glsa/202012-01Third Party Advisory
• https://usn.ubuntu.com/4488-2/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1417/Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1862246Issue Tracking, Third Party Advisory
• https://lists.x.org/archives/xorg-announce/2020-August/003058.htmlMailing List, Patch, Vendor Advisory
• https://security.gentoo.org/glsa/202012-01Third Party Advisory
• https://usn.ubuntu.com/4488-2/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1417/Third Party Advisory, VDB Entry

Published

Sep 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14340A vulnerability was discovered in XNIO where file descriptor…5.9
• CVE-2020-14341The "Test Connection" available in v7.x of the Red Hat Singl…2.7
• CVE-2020-14342It was found that cifs-utils' mount.cifs was invoking a shel…7
• CVE-2020-14343A vulnerability was discovered in the PyYAML library in vers…9.8
• CVE-2020-14344An integer overflow leading to a heap-buffer overflow was fo…6.7
• CVE-2020-14345A flaw was found in X.Org Server before xorg-x11-server 1.20…7.8
• CVE-2020-14347A flaw was found in the way xserver memory was not properly …5.5
• CVE-2020-14348It was found in AMQ Online before 1.5.2 that injecting an in…4.3
• CVE-2020-14349It was found that PostgreSQL versions before 12.4, before 11…7.1
• CVE-2020-1435A remote code execution vulnerability exists in the way that…8.8
• CVE-2020-14350It was found that some PostgreSQL extensions did not use sea…7.3
• CVE-2020-14351A flaw was found in the Linux kernel. A use-after-free memor…7.8