# CVE-2023-43787: libx11: A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function CVE-2023-43787 is fixed in 18 products on 1 platform, first by libx11-6 2:1.6.4-3ubuntu0.4+esm2, released October 2, 2023. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2023-43787 - Priority: High - CVSS: 7.8 (high) - EPSS: 0.0048 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 2, 2023 ## Description A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libX11 RHEL 8 | 0:1.6.8-8.el8 | [RHSA-2024:2973](https://patchblox.com/security/data/fix/linux/rhsa-2024-2973.md) | May 22, 2024 | | Linux | libX11 RHEL 9 | 0:1.7.0-9.el9 | [RHSA-2024:2145](https://patchblox.com/security/data/fix/linux/rhsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11 almalinux 8 | 1.6.8-8.el8 | [ALSA-2024:2973](https://patchblox.com/security/data/fix/linux/alsa-2024-2973.md) | May 22, 2024 | | Linux | libX11 almalinux 9 | 1.7.0-9.el9 | [ALSA-2024:2145](https://patchblox.com/security/data/fix/linux/alsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11 amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libX11 ol 8 | 0:1.6.8-8.el8 | [ELSA-2024-2973](https://patchblox.com/security/data/fix/linux/elsa-2024-2973.md) | May 23, 2024 | | Linux | libX11 ol 9 | 0:1.7.0-9.el9 | [ELSA-2024-2145](https://patchblox.com/security/data/fix/linux/elsa-2024-2145.md) | May 2, 2024 | | Linux | libX11 rocky 8 | 0:1.6.8-8.el8 | [RLSA-2024:2973](https://patchblox.com/security/data/fix/linux/rlsa-2024-2973.md) | May 7, 2025 | | Linux | libX11 rocky 9 | 0:1.7.0-9.el9 | [RLSA-2024:2145](https://patchblox.com/security/data/fix/linux/rlsa-2024-2145.md) | May 7, 2025 | | Linux | libX11-common RHEL 8 | 0:1.6.8-8.el8 | [RHSA-2024:2973](https://patchblox.com/security/data/fix/linux/rhsa-2024-2973.md) | May 22, 2024 | | Linux | libX11-common RHEL 9 | 0:1.7.0-9.el9 | [RHSA-2024:2145](https://patchblox.com/security/data/fix/linux/rhsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11-common almalinux 8 | 1.6.8-8.el8 | [ALSA-2024:2973](https://patchblox.com/security/data/fix/linux/alsa-2024-2973.md) | May 22, 2024 | | Linux | libX11-common almalinux 9 | 1.7.0-9.el9 | [ALSA-2024:2145](https://patchblox.com/security/data/fix/linux/alsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11-common amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libX11-common ol 8 | 0:1.6.8-8.el8 | [ELSA-2024-2973](https://patchblox.com/security/data/fix/linux/elsa-2024-2973.md) | May 23, 2024 | | Linux | libX11-common ol 9 | 0:1.7.0-9.el9 | [ELSA-2024-2145](https://patchblox.com/security/data/fix/linux/elsa-2024-2145.md) | May 2, 2024 | | Linux | libX11-debuginfo amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libX11-debugsource amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libX11-devel RHEL 8 | 0:1.6.8-8.el8 | [RHSA-2024:2973](https://patchblox.com/security/data/fix/linux/rhsa-2024-2973.md) | May 22, 2024 | | Linux | libX11-devel RHEL 9 | 0:1.7.0-9.el9 | [RHSA-2024:2145](https://patchblox.com/security/data/fix/linux/rhsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11-devel almalinux 8 | 1.6.8-8.el8 | [ALSA-2024:2973](https://patchblox.com/security/data/fix/linux/alsa-2024-2973.md) | May 22, 2024 | | Linux | libX11-devel almalinux 9 | 1.7.0-9.el9 | [ALSA-2024:2145](https://patchblox.com/security/data/fix/linux/alsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11-devel amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libX11-devel ol 8 | 0:1.6.8-8.el8 | [ELSA-2024-2973](https://patchblox.com/security/data/fix/linux/elsa-2024-2973.md) | May 23, 2024 | | Linux | libX11-devel ol 9 | 0:1.7.0-9.el9 | [ELSA-2024-2145](https://patchblox.com/security/data/fix/linux/elsa-2024-2145.md) | May 2, 2024 | | Linux | libX11-xcb RHEL 8 | 0:1.6.8-8.el8 | [RHSA-2024:2973](https://patchblox.com/security/data/fix/linux/rhsa-2024-2973.md) | May 22, 2024 | | Linux | libX11-xcb RHEL 9 | 0:1.7.0-9.el9 | [RHSA-2024:2145](https://patchblox.com/security/data/fix/linux/rhsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11-xcb almalinux 8 | 1.6.8-8.el8 | [ALSA-2024:2973](https://patchblox.com/security/data/fix/linux/alsa-2024-2973.md) | May 22, 2024 | | Linux | libX11-xcb almalinux 9 | 1.7.0-9.el9 | [ALSA-2024:2145](https://patchblox.com/security/data/fix/linux/alsa-2024-2145.md) | Apr 30, 2024 | | Linux | libX11-xcb amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libX11-xcb ol 8 | 0:1.6.8-8.el8 | [ELSA-2024-2973](https://patchblox.com/security/data/fix/linux/elsa-2024-2973.md) | May 23, 2024 | | Linux | libX11-xcb ol 9 | 0:1.7.0-9.el9 | [ELSA-2024-2145](https://patchblox.com/security/data/fix/linux/elsa-2024-2145.md) | May 2, 2024 | | Linux | libX11-xcb-debuginfo amzn 2023 | 1.7.2-3.amzn2023.0.4 | [ALAS2023-2023-383](https://patchblox.com/security/data/fix/linux/alas2023-2023-383.md) | Oct 12, 2023 | | Linux | libXpm amzn 2023 | 3.5.15-2.amzn2023.0.3 | [ALAS2023-2023-382](https://patchblox.com/security/data/fix/linux/alas2023-2023-382.md) | Oct 12, 2023 | | Linux | libXpm-debuginfo amzn 2023 | 3.5.15-2.amzn2023.0.3 | [ALAS2023-2023-382](https://patchblox.com/security/data/fix/linux/alas2023-2023-382.md) | Oct 12, 2023 | | Linux | libXpm-debugsource amzn 2023 | 3.5.15-2.amzn2023.0.3 | [ALAS2023-2023-382](https://patchblox.com/security/data/fix/linux/alas2023-2023-382.md) | Oct 12, 2023 | | Linux | libXpm-devel amzn 2023 | 3.5.15-2.amzn2023.0.3 | [ALAS2023-2023-382](https://patchblox.com/security/data/fix/linux/alas2023-2023-382.md) | Oct 12, 2023 | | Linux | libXpm-devel-debuginfo amzn 2023 | 3.5.15-2.amzn2023.0.3 | [ALAS2023-2023-382](https://patchblox.com/security/data/fix/linux/alas2023-2023-382.md) | Oct 12, 2023 | | Linux | libx11 Debian 12.15 (bookworm) | 2:1.8.4-2+deb12u2 | [DEBIAN-CVE-2023-43787](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43787.md) | Oct 10, 2023 | | Linux | libx11 Debian 13.5 (trixie) | 2:1.8.7-1 | [DEBIAN-CVE-2023-43787](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43787.md) | Oct 10, 2023 | | Linux | libx11 Debian 14 | 2:1.8.7-1 | [DEBIAN-CVE-2023-43787](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43787.md) | Oct 10, 2023 | | Linux | libx11-6 Ubuntu 18.04.6 LTS (bionic) | 2:1.6.4-3ubuntu0.4+esm2 | [libx11-6 2:1.6.4-3ubuntu0.4+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libx11-6-2-1.6.4-3ubuntu0.4-esm2.md) | Oct 2, 2023 | | Linux | libx11-6 Ubuntu 20.04 LTS (focal) | 2:1.6.9-2ubuntu1.6 | [libx11-6 2:1.6.9-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libx11-6-2-1.6.9-2ubuntu1.6.md) | Oct 2, 2023 | | Linux | libx11-6 Ubuntu 22.04.1 LTS (jammy) | 2:1.7.5-1ubuntu0.3 | [libx11-6 2:1.7.5-1ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libx11-6-2-1.7.5-1ubuntu0.3.md) | Oct 2, 2023 | | Linux | libx11-6 Ubuntu 24.04.5 LTS (noble) | 2:1.8.6-1ubuntu1 | [libx11-6 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libx11-6-2-1.8.6-1ubuntu1.md) | Oct 2, 2023 | | Linux | libx11-6 Ubuntu 24.10 (oracular) | 2:1.8.6-1ubuntu1 | [libx11-6 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libx11-6-2-1.8.6-1ubuntu1.md) | Oct 3, 2023 | | Linux | libx11-6 Ubuntu 25.04 (plucky) | 2:1.8.6-1ubuntu1 | [libx11-6 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libx11-6-2-1.8.6-1ubuntu1.md) | Oct 3, 2023 | | Linux | libx11-data Ubuntu 18.04.6 LTS (bionic) | 2:1.6.4-3ubuntu0.4+esm2 | [libx11-data 2:1.6.4-3ubuntu0.4+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libx11-data-2-1.6.4-3ubuntu0.4-esm2.md) | Oct 2, 2023 | | Linux | libx11-data Ubuntu 20.04 LTS (focal) | 2:1.6.9-2ubuntu1.6 | [libx11-data 2:1.6.9-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libx11-data-2-1.6.9-2ubuntu1.6.md) | Oct 2, 2023 | | Linux | libx11-data Ubuntu 22.04.1 LTS (jammy) | 2:1.7.5-1ubuntu0.3 | [libx11-data 2:1.7.5-1ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libx11-data-2-1.7.5-1ubuntu0.3.md) | Oct 2, 2023 | | Linux | libx11-data Ubuntu 24.04.5 LTS (noble) | 2:1.8.6-1ubuntu1 | [libx11-data 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libx11-data-2-1.8.6-1ubuntu1.md) | Oct 2, 2023 | | Linux | libx11-data Ubuntu 24.10 (oracular) | 2:1.8.6-1ubuntu1 | [libx11-data 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libx11-data-2-1.8.6-1ubuntu1.md) | Oct 3, 2023 | | Linux | libx11-data Ubuntu 25.04 (plucky) | 2:1.8.6-1ubuntu1 | [libx11-data 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libx11-data-2-1.8.6-1ubuntu1.md) | Oct 3, 2023 | | Linux | libx11-xcb1 Ubuntu 18.04.6 LTS (bionic) | 2:1.6.4-3ubuntu0.4+esm2 | [libx11-xcb1 2:1.6.4-3ubuntu0.4+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libx11-xcb1-2-1.6.4-3ubuntu0.4-esm2.md) | Oct 2, 2023 | | Linux | libx11-xcb1 Ubuntu 20.04 LTS (focal) | 2:1.6.9-2ubuntu1.6 | [libx11-xcb1 2:1.6.9-2ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libx11-xcb1-2-1.6.9-2ubuntu1.6.md) | Oct 2, 2023 | | Linux | libx11-xcb1 Ubuntu 22.04.1 LTS (jammy) | 2:1.7.5-1ubuntu0.3 | [libx11-xcb1 2:1.7.5-1ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libx11-xcb1-2-1.7.5-1ubuntu0.3.md) | Oct 2, 2023 | | Linux | libx11-xcb1 Ubuntu 24.04.5 LTS (noble) | 2:1.8.6-1ubuntu1 | [libx11-xcb1 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libx11-xcb1-2-1.8.6-1ubuntu1.md) | Oct 2, 2023 | | Linux | libx11-xcb1 Ubuntu 24.10 (oracular) | 2:1.8.6-1ubuntu1 | [libx11-xcb1 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libx11-xcb1-2-1.8.6-1ubuntu1.md) | Oct 3, 2023 | | Linux | libx11-xcb1 Ubuntu 25.04 (plucky) | 2:1.8.6-1ubuntu1 | [libx11-xcb1 2:1.8.6-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libx11-xcb1-2-1.8.6-1ubuntu1.md) | Oct 3, 2023 | | Linux | libxpm4 Ubuntu 18.04.6 LTS (bionic) | 1:3.5.12-1ubuntu0.18.04.2+esm1 | [libxpm4 1:3.5.12-1ubuntu0.18.04.2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libxpm4-1-3.5.12-1ubuntu0.18.04.2-esm1.md) | Oct 2, 2023 | | Linux | libxpm4 Ubuntu 20.04 LTS (focal) | 1:3.5.12-1ubuntu0.20.04.2 | [libxpm4 1:3.5.12-1ubuntu0.20.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxpm4-1-3.5.12-1ubuntu0.20.04.2.md) | Oct 2, 2023 | | Linux | libxpm4 Ubuntu 22.04.1 LTS (jammy) | 1:3.5.12-1ubuntu0.22.04.2 | [libxpm4 1:3.5.12-1ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libxpm4-1-3.5.12-1ubuntu0.22.04.2.md) | Oct 2, 2023 | | Linux | libxpm4 Ubuntu 24.04.5 LTS (noble) | 1:3.5.12-1.1ubuntu1 | [libxpm4 1:3.5.12-1.1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libxpm4-1-3.5.12-1.1ubuntu1.md) | Oct 2, 2023 | | Linux | libxpm4 Ubuntu 24.10 (oracular) | 1:3.5.12-1.1ubuntu1 | [libxpm4 1:3.5.12-1.1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libxpm4-1-3.5.12-1.1ubuntu1.md) | Oct 3, 2023 | | Linux | libxpm4 Ubuntu 25.04 (plucky) | 1:3.5.12-1.1ubuntu1 | [libxpm4 1:3.5.12-1.1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libxpm4-1-3.5.12-1.1ubuntu1.md) | Oct 3, 2023 | | Linux | xpmutils Ubuntu 18.04.6 LTS (bionic) | 1:3.5.12-1ubuntu0.18.04.2+esm1 | [xpmutils 1:3.5.12-1ubuntu0.18.04.2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xpmutils-1-3.5.12-1ubuntu0.18.04.2-esm1.md) | Oct 2, 2023 | | Linux | xpmutils Ubuntu 20.04 LTS (focal) | 1:3.5.12-1ubuntu0.20.04.2 | [xpmutils 1:3.5.12-1ubuntu0.20.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xpmutils-1-3.5.12-1ubuntu0.20.04.2.md) | Oct 2, 2023 | | Linux | xpmutils Ubuntu 22.04.1 LTS (jammy) | 1:3.5.12-1ubuntu0.22.04.2 | [xpmutils 1:3.5.12-1ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xpmutils-1-3.5.12-1ubuntu0.22.04.2.md) | Oct 2, 2023 | | Linux | xpmutils Ubuntu 24.04.5 LTS (noble) | 1:3.5.12-1.1ubuntu1 | [xpmutils 1:3.5.12-1.1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-xpmutils-1-3.5.12-1.1ubuntu1.md) | Oct 2, 2023 | | Linux | xpmutils Ubuntu 24.10 (oracular) | 1:3.5.12-1.1ubuntu1 | [xpmutils 1:3.5.12-1.1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-xpmutils-1-3.5.12-1.1ubuntu1.md) | Oct 3, 2023 | | Linux | xpmutils Ubuntu 25.04 (plucky) | 1:3.5.12-1.1ubuntu1 | [xpmutils 1:3.5.12-1.1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-xpmutils-1-3.5.12-1.1ubuntu1.md) | Oct 3, 2023 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.