An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade virglrenderer | Aug 22, 2024 | Dec 23, 2019 |
| Debian | — | Upgrade virglrenderer | Dec 9, 2022 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade virglrenderer-develUpgrade virglrenderer | Aug 31, 2020 | Dec 23, 2019 |
| Suse | — | suse-upgrade-libvirglrenderer0suse-upgrade-virglrenderer-develsuse-upgrade-virglrenderer-test-server | Jan 8, 2020 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub