CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker to escalate privileges and execute arbitrary code in the context of root.

• CWE-787
• CWE-787

• https://github.com/freedesktop/xorg-xserver/commit/dd8caf39e9e15d8f302e54045dd08d8ebf1025dcPatch, Third Party Advisory
• https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/938Patch, Third Party Advisory
• https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/939Patch, Third Party Advisory
• https://lists.freedesktop.org/archives/xorg-announce/2022-July/003192.htmlPatch, Third Party Advisory
• https://security.gentoo.org/glsa/202210-30Third Party Advisory
• https://security.netapp.com/advisory/ntap-20221104-0003/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-963/Third Party Advisory, VDB Entry
• https://github.com/freedesktop/xorg-xserver/commit/dd8caf39e9e15d8f302e54045dd08d8ebf1025dcPatch, Third Party Advisory
• https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/938Patch, Third Party Advisory
• https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/939Patch, Third Party Advisory
• https://lists.freedesktop.org/archives/xorg-announce/2022-July/003192.htmlPatch, Third Party Advisory
• https://security.gentoo.org/glsa/202210-30Third Party Advisory
• https://security.netapp.com/advisory/ntap-20221104-0003/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-963/Third Party Advisory, VDB Entry

Published

Sep 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23194Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (…5.5
• CVE-2022-23195Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (…5.5
• CVE-2022-23196Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (…5.5
• CVE-2022-23197Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (…5.5
• CVE-2022-23198Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (…5.5
• CVE-2022-23199Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (…5.5
• CVE-2022-23200Adobe After Effects versions 22.1.1 (and earlier) and 18.4.3…7.8
• CVE-2022-23201Adobe RoboHelp versions 2020.0.7 (and earlier) is affected b…6.1
• CVE-2022-23202Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) …7
• CVE-2022-23203Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and …7.8
• CVE-2022-23204Adobe Premiere Rush versions 2.0 and earlier are affected by…5.5
• CVE-2022-23205Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and…7.8