xnest: A heap-based buffer over-read vulnerability was found in the X.org server'sProcAppleDRICreatePixmap() function

A heap-based buffer over-read vulnerability was found in the X.org server'sProcAppleDRICreatePixmap() function. This issue occurs when byte-swappedlength values are used in replies, potentially leading to memory leakageand segmentation faults, particularly when triggered by a client with adifferent endianness. This vulnerability could be exploited by an attackerto cause the X server to read heap memory values and then transmit themback to the client until encountering an unmapped page, resulting in acrash. Despite the attacker's inability to control the specific memorycopied into the replies, the small length values typically stored in a32-bit integer can result in significant attempted out-of-bounds reads.

Where it's fixed