CVE-2013-7439

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

View graph Watch Export

CVSS v3.1

—

EPSS

4.25%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

5 relationships

Timeline

disclosure → media coverage

Apr 16, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026