CVE-2022-0175

2022-08-2600:00:00

CWE-909

redhat

www.cve.org

virgl

virtual opengl

memory initialization

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading to information disclosure.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "virglrenderer",
    "versions": [
      {
        "version": "Affects v0.9.0 and later.",
        "status": "affected"
      }
    ]
  }
]