CVE-2022-46340

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.

• CWE-787
• CWE-787

• https://access.redhat.com/security/cve/CVE-2022-46340Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2151755Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202305-30
• https://www.debian.org/security/2022/dsa-5304Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2022-46340Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2151755Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWTH3SNJ3GKYDSN7I3QDGWYEPSMWU6EP/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202305-30
• https://www.debian.org/security/2022/dsa-5304Third Party Advisory

Published

Dec 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46334Proofpoint Enterprise Protection (PPS/PoD) contains a vulner…7.8
• CVE-2022-46335Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-46336Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-46337A cleverly devised username might bypass LDAP authentication…9.8
• CVE-2022-46338g810-led 0.4.2, a LED configuration tool for Logitech Gx10 k…6.5
• CVE-2022-4634All versions prior to Delta Electronic’s CNCSoft version 1.0…7.8
• CVE-2022-46341A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46342A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46343A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46344A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46345A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-46346A vulnerability has been identified in Parasolid V33.1 (All …7.8