CVE-2019-18389

CVE-2019-18389 describes a heap-based buffer overflow in the virglrenderer transfer path. Specifically, vrend_renderer_transfer_write_iov in vrend_renderer.c (virglrenderer up to version 0.8.0) can be triggered by VIRGL_CCMD_RESOURCE_INLINE_WRITE, enabling denial of service and potentially guest‑...

CVE-2019-18388

CVE-2019-18388 affects virglrenderer, with a NULL pointer dereference in vrend_renderer.c up to version 0.8.0. The flaw allows a local guest OS user to trigger a denial of service via malformed VRAM commands. Multiple connected advisories (Debian DLA-3232, openSUSE SUSE-SU updates, SUSE openSUSE-...

CVE-2019-18388

A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands...

CVE-2019-18390

An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...

CVE-2019-18391

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18388

A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands...

CVE-2019-18390

CVE-2019-18390 concerns virglrenderer with an out-of-bounds read in vrend_blit_need_swizzle (vrend_renderer.c) affecting versions up to 0.8.0. The vulnerability enables a DoS from a guest OS via VIRGL_CCMD_BLIT commands, with local attack vector and partial confidentiality/availability impact per...

CVE-2019-18390: Out-of-bounds Read

An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDBLIT commands...

CVE-2019-18389: Out-of-bounds Write

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18391: Out-of-bounds Write

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18388: NULL Pointer Dereference

A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands...

CVE-2019-18388

A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands...

CVE-2019-18391

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18391

A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows guest OS users to cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2019-18388

A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands...

CVE-2019-18389

A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows guest OS users to cause a denial of service or a QEMU guest-to-host escape with code execution. The highest threat from this vulnerability is to data confidentiality and integrity as we...

PT-2019-4527

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.8.0 and earlier Description The issue is related to an out-of-bounds read in the vrend blit need swizzle function in vrend renderer.c in virglrenderer. This can be exploited by guest OS users to cause a denial of servi...

PT-2019-4528

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.8.0 Description A heap-based buffer overflow issue in the vrend renderer transfer write iov function allows guest OS users to cause a denial of service via VIRGL CCMD RESOURCE INLINE WRITE commands. This issue...