Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | U.motion Builder, all versions prior to 1.3.4 |