AIKIDO-2025-10605
xcb is vulnerable to Operation on a Resource after Expiration or Release
63
Medium Risk
This Affects:
xcbTL;DR
Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release in the Connection::connect_with_fd and Connection::connect_with_fd_and_extensions functions. By supplying a crafted RawFd, an attacker can trigger unintended closure of file descriptors, potentially leading to use-after-close conditions, resource mismanagement, or denial of service through repeated closure of already-closed descriptors.
Who does this affect?
You are affected if you are using a version which is within vulnerability ranges
Background info
xcb is vulnerable to Operation on a Resource after Expiration or Release in versions 0.4.0 - 1.5.0.
How to fix this
Upgrade the xcb library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant