Unscored severity · published Jun 15, 2013
CVE-2013-1984
Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1)…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libxi · X.org
through 1.7.1; 1.5.0; 1.5.99.2; 1.5.99.3; 1.6.0; 1.6.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1984
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1984
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html
www.debian.org
http://www.debian.org/security/2013/dsa-2683
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/05/23/3
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1859-1
Vendor Advisory
http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
More from Libxi
7.5
CVE-2026-109090
libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
7.5
CVE-2026-109089
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
7.5
CVE-2016-7946
X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields
7.5
CVE-2016-7945
Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving…
7.4
CVE-2026-93543
Out-of-bounds read in libXi's XI2 class parser