CVE-2016-5407
libxv1: The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to tri...
CVE-2016-5407 is fixed in libxv1 on 1 platform, first by libxv1 2:1.0.11-1, released December 13, 2016. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0453
91st percentile
The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxv1 · Ubuntu 18.04.6 LTS (bionic) | 2:1.0.11-1 | libxv1 2:1.0.11-1 | Dec 13, 2016 |
| libxv1 · Ubuntu 20.04 LTS (focal) | 2:1.0.11-1 | libxv1 2:1.0.11-1 | Dec 13, 2016 |
| libxv1 · Ubuntu 22.04.1 LTS (jammy) | 2:1.0.11-1 | libxv1 2:1.0.11-1 | Dec 13, 2016 |