{"id":"CVE-2016-5407","aliases":["ALPINE-CVE-2016-5407","BELL-CVE-2016-5407","DEBIAN-CVE-2016-5407","DLA-667-1","EUVD-2016-6352","GHSA-cwhm-4g62-g8f6","MGASA-2018-0011","SUSE-SU-2016:2505-1","SUSE-SU-2016:2828-1","SUSE-SU-2016:3110-1","UBUNTU-CVE-2016-5407","USN-5449-1","openSUSE-SU-2024:10274-1"],"status":"published","title":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow...","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04526,"percentile":0.91603,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-125"],"published":"2016-10-12T09:36:18Z","modified":"2026-10-20T10:47:39Z","fixes":[{"ecosystem":"Alpine:v3.2","package":"libxv","fixed_in":["1.0.10-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libxv","fixed_in":["1.0.10-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxv","fixed_in":["2:1.0.11-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxv","fixed_in":["2:1.0.11-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxv","fixed_in":["2:1.0.11-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libxv","fixed_in":["2:1.0.7-1+deb7u2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"xorg-x11-libXv","fixed_in":["7.4-1.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"xorg-x11-libXv","fixed_in":["7.4-1.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"xorg-x11-libXv","fixed_in":["7.4-1.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxv","fixed_in":["2:1.0.10-1ubuntu0.16.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libxv","fixed_in":["2:1.0.11-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxv","fixed_in":["2:1.0.11-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxv","fixed_in":["2:1.0.11-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.2","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.11-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.11-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.11-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.7-1+deb7u2"}]}],"versions":["2:1.0.7-1","2:1.0.7-1+deb7u1"]},{"source":"osv","ecosystem":"Mageia:5","package":"libx11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-4.1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:5","package":"libxvmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-1.mga5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-6.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-6.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-6.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-6.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-12.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXrandr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-5.2"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-14.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-14.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-14.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-14.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libX11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libXfixes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libXi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-14.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libXrender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libXtst","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libXvMC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"xorg-x11-libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-1.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"xorg-x11-libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-1.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"xorg-x11-libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4-1.20.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.10-1ubuntu0.16.04.1~esm1"}]}],"versions":["2:1.0.10-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.11-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.11-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.11-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.10-1ubuntu0.16.04.1~esm1"}]}],"versions":["2:1.0.10-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libXv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-1.1"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"x.org","product":"libxv"}],"references":[{"url":"http://www.securitytracker.com/id/1036945","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/93368","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201704-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://lists.x.org/archives/xorg-announce/2016-October/002720.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/04/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://cgit.freedesktop.org/xorg/lib/libXv/commit/?id=d9da580b46a28ab497de2e94fdc7b9ff953dab17","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/04/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AE2VJOFA3EZA566RERQB54TFY56FROZR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IA7BLB4C3JOYVU6UASGUJQJKUF6TO7E/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5407"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IA7BLB4C3JOYVU6UASGUJQJKUF6TO7E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AE2VJOFA3EZA566RERQB54TFY56FROZR"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3IA7BLB4C3JOYVU6UASGUJQJKUF6TO7E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AE2VJOFA3EZA566RERQB54TFY56FROZR"},{"url":"https://github.com/advisories/GHSA-cwhm-4g62-g8f6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-5407","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-5407","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-5407","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0011.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19530","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/10/04/4","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162505-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1002991","tags":["report"]},{"url":"https://bugzilla.suse.com/1002995","tags":["report"]},{"url":"https://bugzilla.suse.com/1002998","tags":["report"]},{"url":"https://bugzilla.suse.com/1003000","tags":["report"]},{"url":"https://bugzilla.suse.com/1003002","tags":["report"]},{"url":"https://bugzilla.suse.com/1003012","tags":["report"]},{"url":"https://bugzilla.suse.com/1003017","tags":["report"]},{"url":"https://bugzilla.suse.com/1003023","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7953","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162828-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163110-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-5407","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5449-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5407","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2066","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-5407","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:00:00Z","modified":"2024-08-06T01:00:59.993Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6352","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:00:00Z","modified":"2024-08-06T01:00:59Z","updated_at":"2026-11-03T02:22:42.442421Z"}],"ghsa":[{"id":"GHSA-cwhm-4g62-g8f6","title":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow...","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2022-05-17T02:37:29Z","modified":"2025-04-12T13:07:17Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:30.348567Z"}],"nvd":[{"id":"CVE-2016-5407","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:59:01.923Z","modified":"2026-06-17T00:49:21.367Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"ALPINE-CVE-2016-5407","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:59:01.923Z","modified":"2026-09-22T06:30:34.276254032Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"BELL-CVE-2016-5407","title":"CVE-2016-5407 does not affect BellSoft software","status":"withdrawn","published":"2016-12-13T20:59:00Z","modified":"2026-01-26T09:48:22.470348Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2016-5407","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:59:01.923Z","modified":"2026-10-20T10:47:39.884228249Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-5407","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:59:01.923Z","modified":"2026-09-22T07:02:08.777466755Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"UBUNTU-CVE-2016-5407","description":"The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.","status":"published","published":"2016-12-13T20:59:00Z","modified":"2026-04-22T10:52:33.009237Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"DLA-667-1","title":"libxv - security update","status":"published","published":"2016-10-19T00:00:00Z","modified":"2026-03-09T02:11:11.682494Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2018-0011","title":"Updated X11 client libraries packages fix security vulnerability","description":"The XvQueryAdaptors and XvQueryEncodings functions in X.org libXv before\n1.0.11 allow remote X servers to trigger out-of-bounds memory access\noperations via vectors involving length specifications in received data\n(CVE-2016-5407).\n\nThe XGetImage function in X.org libX11 before 1.6.4 might allow remote X\nservers to gain privileges via vectors involving image type and geometry,\nwhich triggers out-of-bounds read operations (CVE-2016-7942).\n\nThe XListFonts function in X.org libX11 before 1.6.4 might allow remote X\nservers to gain privileges via vectors involving length fields, which\ntrigger out-of-bounds write operations (CVE-2016-7943).\n\nInteger overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might\nallow remote X servers to gain privileges via a length value of INT_MAX,\nwhich triggers the client to stop reading data and get out of sync\n(CVE-2016-7944).\n\nMultiple integer overflows in X.org libXi before 1.7.7 allow remote X\nservers to cause a denial of service (out-of-bounds memory access or\ninfinite loop) via vectors involving length fields (CVE-2016-7945).\n\nX.org libXi before 1.7.7 allows remote X servers to cause a denial of\nservice (infinite loop) via vectors involving length fields\n(CVE-2016-7946).\n\nMultiple integer overflows in X.org libXrandr before 1.5.1 allow remote X\nservers to trigger out-of-bounds write operations via a crafted response\n(CVE-2016-7947).\n\nX.org libXrandr before 1.5.1 allows remote X servers to trigger\nout-of-bounds write operations by leveraging mishandling of reply data\n(CVE-2016-7948).\n\nMultiple buffer overflows in the XvQueryAdaptors and XvQueryEncodings\nfunctions in X.org libXrender before 0.9.10 allow remote X servers to\ntrigger out-of-bounds write operations via vectors involving length fields\n(CVE-2016-7949).\n\nThe XRenderQueryFilters function in X.org libXrender before 0.9.10 allows\nremote X servers to trigger out-of-bounds write operations via vectors\ninvolving filter name lengths (CVE-2016-7950).\n\nMultiple integer overflows in X.org libXtst before 1.2.3 allow remote X\nservers to trigger out-of-bounds memory access operations by leveraging\nthe lack of range checks (CVE-2016-7951).\n\nX.org libXtst before 1.2.3 allows remote X servers to cause a denial of\nservice (infinite loop) via a reply in the XRecordStartOfData,\nXRecordEndOfData, or XRecordClientDied category without a client sequence\nand with attached data (CVE-2016-7952).\n\nBuffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to\nhave unspecified impact via an empty string (CVE-2016-7953).\n","status":"published","published":"2018-01-01T15:50:28Z","modified":"2026-04-16T06:25:22.394917606Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10274-1","title":"libXv-devel-1.0.11-1.1 on GA media","description":"These are all security issues fixed in the libXv-devel-1.0.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:40:17.408401Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:2505-1","title":"Security update for X Window System client libraries","description":"This update for the X Window System client libraries fixes a class of privilege escalation issues.\n\nA malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission level boundaries.\n\nlibX11, libXfixes, libXi, libXrandr, libXrender, libXtst, libXv, libXvMC were fixed, specifically:\n\nlibX11:\n- CVE-2016-7942: insufficient validation of data from the X server allowed out of boundary memory read (bsc#1002991)\n\nlibXfixes:\n- CVE-2016-7944: insufficient validation of data from the X server can cause an integer overflow on 32 bit architectures (bsc#1002995)\n\nlibXi:\n- CVE-2016-7945, CVE-2016-7946: insufficient validation of data from the X server can cause out of boundary memory access or endless loops (Denial of Service) (bsc#1002998)\n\nlibXtst:\n- CVE-2016-7951, CVE-2016-7952: insufficient validation of data from the X server can cause out of boundary memory access or endless loops (Denial of Service) (bsc#1003012)\n\nlibXv:\n- CVE-2016-5407: insufficient validation of data from the X server can cause out of boundary memory and memory corruption (bsc#1003017)\n\nlibXvMC:\n- CVE-2016-7953: insufficient validation of data from the X server can cause a one byte buffer read underrun (bsc#1003023)\n\nlibXrender:\n- CVE-2016-7949, CVE-2016-7950: insufficient validation of data from the X server can cause out of boundary memory writes (bsc#1003002)\n\nlibXrandr:\n- CVE-2016-7947, CVE-2016-7948: insufficient validation of data from the X server can cause out of boundary memory writes (bsc#1003000)\n","status":"published","published":"2016-10-12T09:36:18Z","modified":"2026-02-04T03:03:23.952748Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2828-1","title":"Security update for X Window System client libraries","description":"\nThis update for the X Window System client libraries fixes a class of privilege escalation issues.\n\nA malicious X Server could send specially crafted data to X clients, which allowed for triggering\ncrashes, or privilege escalation if this relationship was untrusted or crossed user or permission\nlevel boundaries.\n\nlibX11, libXfixes, libXi, libXrandr, libXrender, libXtst, libXv, libXvMC were fixed, specifically:\n\nlibX11:\n- CVE-2016-7942: insufficient validation of data from the X server allowed out of boundary memory\n  read (bsc#1002991)\n\nlibXfixes:\n- CVE-2016-7944: insufficient validation of data from the X server can cause an integer overflow\n  on 32 bit architectures (bsc#1002995)\n\nlibXi:\n- CVE-2016-7945, CVE-2016-7946: insufficient validation of data from the X server can cause out of\n  boundary memory access or endless loops (Denial of Service) (bsc#1002998)\n\nlibXtst:\n- CVE-2016-7951, CVE-2016-7952: insufficient validation of data from the X server can cause out of\n  boundary memory access or endless loops (Denial of Service) (bsc#1003012)\n\nlibXv:\n- CVE-2016-5407: insufficient validation of data from the X server can cause out of boundary memory\n  and memory corruption (bsc#1003017)\n\nlibXvMC:\n- CVE-2016-7953: insufficient validation of data from the X server can cause a one byte buffer read\n  underrun (bsc#1003023)\n\nlibXrender:\n- CVE-2016-7949, CVE-2016-7950: insufficient validation of data from the X server can cause out of\n  boundary memory writes (bsc#1003002)\n\nlibXrandr:\n- CVE-2016-7947, CVE-2016-7948: insufficient validation of data from the X server can cause out of\n  boundary memory writes (bsc#1003000)\n","status":"published","published":"2016-11-17T13:34:57Z","modified":"2026-02-04T02:53:30.908437Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:3110-1","title":"Security update for xorg-x11-libXv","description":"\nThis update for xorg-x11-libXv fixes the following issues:\n\n  - insufficient validation of data from the X server can cause\n    memory corruption (bsc#1003017, CVE-2016-5407)\n","status":"published","published":"2016-12-13T11:52:54Z","modified":"2026-02-04T03:39:19.768565Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-5449-1","title":"libxv vulnerability","description":"It was discovered that libXv incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial\nof service, or possibly execute arbitrary code.\n","status":"published","published":"2022-05-26T15:21:11Z","modified":"2026-06-25T13:30:14.891920975Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}