Unscored severity · published Jun 15, 2013
CVE-2013-1998
Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libxi · X.org
through 1.7.1; 1.5.0; 1.5.99.2; 1.5.99.3; 1.6.0; 1.6.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1998
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1998
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html
www.debian.org
http://www.debian.org/security/2013/dsa-2683
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/05/23/3
www.securityfocus.com
http://www.securityfocus.com/bid/60127
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1859-1
More from Libxi
7.5
CVE-2026-109090
libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
7.5
CVE-2026-109089
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
7.5
CVE-2016-7946
X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields
7.5
CVE-2016-7945
Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving…
7.4
CVE-2026-93543
Out-of-bounds read in libXi's XI2 class parser