Wayland

Heap Buffer Overflow in Wayland Mesh Gradient: How a Missing Bounds Check Nearly Enabled Arbitrary Code Execution

A critical heap buffer overflow vulnerability was discovered and patched in `types/wlf_mesh_gradient.c`, where an unvalidated `count` parameter could allow attackers to corrupt heap memory and potentially execute arbitrary code. The fix introduces proper input validation before memory allocation and copy operations, closing a dangerous attack vector that could be triggered through crafted Wayland protocol messages or malicious scene files. This case is a textbook reminder of why bounds checking