In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade mesa-libGL-develUpgrade mesa-libglapiUpgrade mesa-libEGL-develUpgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade mesa-libgbm-develUpgrade mesa-filesystemUpgrade mesa-libEGLUpgrade mesa-libgbmUpgrade mesa-vdpau-driversUpgrade mesa-libGLESUpgrade mesa-libOSMesaUpgrade mesa-libxatrackerUpgrade mesa-khr-develUpgrade mesa-debuginfoUpgrade mesa-libxatracker-develUpgrade mesa-vulkan-driversUpgrade mesa-libGLES-develUpgrade mesa-dri-drivers | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libgbmUpgrade mesa-libGLUpgrade mesa-debugsourceUpgrade mesa-filesystemUpgrade mesa-vulkan-driversUpgrade mesa-libEGLUpgrade mesa-libOpenCL-develUpgrade mesa-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libOSMesaUpgrade mesa-libGL-debuginfoUpgrade mesa-libd3d-debuginfoUpgrade mesa-libglapiUpgrade mesa-libOpenCLUpgrade mesa-libgbm-develUpgrade mesa-libxatrackerUpgrade mesa-libOpenCL-debuginfoUpgrade mesa-libxatracker-develUpgrade mesa-libOSMesa-develUpgrade mesa-libd3dUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libd3d-develUpgrade mesa-vdpau-driversUpgrade mesa-libEGL-debuginfoUpgrade mesa-va-driversUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-dri-drivers | May 4, 2026 | Apr 12, 2026 |
| Debian | — | Upgrade mesa | Jul 12, 2026 | Jul 12, 2026 |
| Ubuntu | — | Upgrade mesa-va-driversUpgrade mesa-teflon-delegateUpgrade libd3dadapter9-mesaUpgrade libgbm1Upgrade libglapi-mesaUpgrade mesa-vdpau-driversUpgrade mesa-libgalliumUpgrade libosmesa6Upgrade libgl1-mesa-driUpgrade mesa-vulkan-driversUpgrade mesa-drm-shimUpgrade libglx-mesa0Upgrade mesa-opencl-icdUpgrade libxatracker2Upgrade libegl-mesa0 | Jun 16, 2026 | Jun 15, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub