A use‑after‑free vulnerability exists in X.Org X server and Xwayland within the CreateSaverWindow() function. The flaw allows a client that can manipulate window attributes and force a screen saver to read memory after the object has already been freed. This results in disclosed data from the X server’s address space, a classic use‑after‑free (CWE‑416) that can reveal confidential information that the client cannot normally access.

The affected products are X.Org X server and Xwayland on Red Hat Enterprise Linux 6, 7, 8, 9 and 10. No specific version numbers are listed in the advisory; any installation of these packages on the mentioned RHEL releases is potentially vulnerable.

The CVSS score of 5.5 indicates a moderate severity, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires a client that can connect to the X server, change window attributes, and force a screen saver. The lack of an EPSS score provides no current estimate of exploitation likelihood, but the described workflow makes the vulnerability usable for information disclosure by an attacker with X client access.