Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
2:21.1.16-1ubuntu12:21.1.18-1ubuntu12:21.1.18-1ubuntu1.12:24.1.6-12:24.1.6-1ubuntu12:24.1.6-1ubuntu1.12:1.17.2-1ubuntu102:1.17.2-1ubuntu92:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu32:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu2+28 more2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.42:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.4+12 moreExploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H