An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | virglrenderer | < 0.10.0-1 | virglrenderer_0.10.0-1_all.deb |
Debian | 11 | all | virglrenderer | < 0.8.2-5+deb11u1 | virglrenderer_0.8.2-5+deb11u1_all.deb |
Debian | 10 | all | virglrenderer | < 0.7.0-2+deb10u1 | virglrenderer_0.7.0-2+deb10u1_all.deb |
Debian | 999 | all | virglrenderer | < 0.10.0-1 | virglrenderer_0.10.0-1_all.deb |
Debian | 13 | all | virglrenderer | < 0.10.0-1 | virglrenderer_0.10.0-1_all.deb |