CVE-2026-33999

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:10739
https://access.redhat.com/errata/RHSA-2026:11352
https://access.redhat.com/errata/RHSA-2026:11369
https://access.redhat.com/errata/RHSA-2026:11388
https://access.redhat.com/errata/RHSA-2026:11656
https://access.redhat.com/errata/RHSA-2026:11692
https://access.redhat.com/errata/RHSA-2026:13414
https://access.redhat.com/errata/RHSA-2026:19125
https://access.redhat.com/errata/RHSA-2026:19342
https://access.redhat.com/errata/RHSA-2026:19343
https://access.redhat.com/errata/RHSA-2026:19344
https://access.redhat.com/errata/RHSA-2026:20547
https://access.redhat.com/errata/RHSA-2026:20555
https://access.redhat.com/errata/RHSA-2026:20557
https://access.redhat.com/errata/RHSA-2026:20558
https://access.redhat.com/errata/RHSA-2026:20560
https://access.redhat.com/errata/RHSA-2026:20561
https://access.redhat.com/errata/RHSA-2026:20562
https://access.redhat.com/errata/RHSA-2026:20563
https://access.redhat.com/errata/RHSA-2026:20575
https://access.redhat.com/errata/RHSA-2026:20576
https://access.redhat.com/errata/RHSA-2026:20590
https://access.redhat.com/errata/RHSA-2026:21699
https://access.redhat.com/errata/RHSA-2026:21712
https://access.redhat.com/errata/RHSA-2026:21715
https://access.redhat.com/errata/RHSA-2026:21716
https://access.redhat.com/errata/RHSA-2026:21718
https://access.redhat.com/errata/RHSA-2026:21741
https://access.redhat.com/errata/RHSA-2026:21742
https://access.redhat.com/errata/RHSA-2026:22424
https://access.redhat.com/errata/RHSA-2026:22456
https://access.redhat.com/errata/RHSA-2026:23254
https://access.redhat.com/errata/RHSA-2026:23255
https://access.redhat.com/errata/RHSA-2026:23496
https://access.redhat.com/errata/RHSA-2026:24341
https://access.redhat.com/security/cve/CVE-2026-33999
https://bugzilla.redhat.com/show_bug.cgi?id=2451106
https://access.redhat.com/errata/RHSA-2026:10739
https://access.redhat.com/errata/RHSA-2026:11352
https://access.redhat.com/errata/RHSA-2026:11369
https://access.redhat.com/errata/RHSA-2026:11388
https://access.redhat.com/errata/RHSA-2026:11656
https://access.redhat.com/errata/RHSA-2026:11692
https://access.redhat.com/errata/RHSA-2026:13414
https://access.redhat.com/errata/RHSA-2026:19125
https://access.redhat.com/errata/RHSA-2026:19342
https://access.redhat.com/errata/RHSA-2026:19343
https://access.redhat.com/errata/RHSA-2026:19344
https://access.redhat.com/errata/RHSA-2026:20547
https://access.redhat.com/errata/RHSA-2026:20555
https://access.redhat.com/errata/RHSA-2026:20557
https://access.redhat.com/errata/RHSA-2026:20558
https://access.redhat.com/errata/RHSA-2026:20560
https://access.redhat.com/errata/RHSA-2026:20561
https://access.redhat.com/errata/RHSA-2026:20562
https://access.redhat.com/errata/RHSA-2026:20563
https://access.redhat.com/errata/RHSA-2026:20575
https://access.redhat.com/errata/RHSA-2026:20576
https://access.redhat.com/errata/RHSA-2026:20590
https://access.redhat.com/errata/RHSA-2026:21699
https://access.redhat.com/errata/RHSA-2026:21712
https://access.redhat.com/errata/RHSA-2026:21715
https://access.redhat.com/errata/RHSA-2026:21716
https://access.redhat.com/errata/RHSA-2026:21718
https://access.redhat.com/errata/RHSA-2026:21741
https://access.redhat.com/errata/RHSA-2026:21742
https://access.redhat.com/errata/RHSA-2026:22424
https://access.redhat.com/errata/RHSA-2026:22456
https://access.redhat.com/errata/RHSA-2026:23254
https://access.redhat.com/errata/RHSA-2026:23255
https://access.redhat.com/errata/RHSA-2026:23496
https://access.redhat.com/errata/RHSA-2026:24341
https://access.redhat.com/security/cve/CVE-2026-33999
https://bugzilla.redhat.com/show_bug.cgi?id=2451106
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json
Configurations

No configuration.

History

No history.

Information

Published : 2026-04-23 16:16

Updated : 2026-07-15 02:20


NVD link : CVE-2026-33999

Mitre link : CVE-2026-33999

CVE.ORG link : CVE-2026-33999


JSON object : View

Products Affected

No product.

CWE
CWE-191

Integer Underflow (Wrap or Wraparound)