CVE-2013-1987: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of i...

Security readout for executives and security teams

CVE-2013-1987 is an old X.Org libXrender memory-safety flaw. A malicious or compromised X server could send responses that make vulnerable client software allocate too little memory, leading to a buffer overflow. The business risk is mainly for systems still running libXrender 0.9.7 or earlier or unsupported Linux releases. Exposure is most likely on legacy Linux or Unix-like systems with X.Org libXrender 0.9.7 or earlier. Modern supported distributions likely shipped fixes through vendor updates, but the bundle does not prove current downstream package status. Treat this as a legacy exposure and hygiene issue unless your environment still depends on old X11 stacks or remote X server workflows. It is not KEV-listed in the provided data, but memory corruption in graphical client libraries warrants cleanup on unmanaged endpoints. Mitigation focus: Apply relevant vendor security updates for libXrender or X.Org client libraries.; Replace unsupported distributions that no longer receive X.Org library fixes.; Avoid connecting graphical clients to untrusted or unknown X servers..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.