38 matches found
OSV-2024-1348 Heap-buffer-overflow in glslang::HlslGrammar::acceptDeclaration
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382721848 Crash type: Heap-buffer-overflow READ 1 Crash state: glslang::HlslGrammar::acceptDeclaration glslang::HlslGrammar::acceptCompilationUnit glslang::HlslParseContext::parseShaderStrings...
OSV-2024-1346 UNKNOWN READ in glslang::HlslTokenStream::advanceToken
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706 Crash type: UNKNOWN READ Crash state: glslang::HlslTokenStream::advanceToken glslang::HlslGrammar::acceptLiteral glslang::HlslGrammar::acceptPostfixExpression...
PT-2024-41091 · Git +1 · Shaderc
Name of the Vulnerable Software and Affected Versions: glslang affected versions not specified Description: The software suffers from an unknown read crash occurring within the glslang library. The crash state involves the glslang::TInfoSinkBase::location, glslang::TParseContextBase::outputMessag...
PT-2024-41090 · Git +1 · Shaderc
Name of the Vulnerable Software and Affected Versions: glslang affected versions not specified Description: The software contains a heap-buffer-overflow read issue. The crash occurs during the parseShaderStrings function within the glslang::HlslParseContext. This function is called by...
OSV-2024-1343 Container-overflow in glslang::HlslParseContext::decomposeIntrinsic
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380569852 Crash type: Container-overflow READ 8 Crash state: glslang::HlslParseContext::decomposeIntrinsic glslang::HlslParseContext::handleFunctionCall glslang::HlslGrammar::acceptFunctionCall...
PT-2024-41065 · Git +1 · Shaderc
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to a container-overflow READ 8 issue. The crash involves the glslang::HlslParseContext::decomposeIntrinsic and glslang::HlslParseContext::handleFunctionCall functions, as...
OSV-2024-1131 UNKNOWN READ in glslang::TInfoSinkBase::location
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368512278 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...
OSV-2024-1045 UNKNOWN READ in glslang::TInfoSinkBase::location
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71345 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...
PT-2024-40568 · Git +1 · Glslang
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including glslang::TInfoSinkBase::location,...
OSV-2024-460 UNKNOWN READ in glslang::TInfoSinkBase::location
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68613 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...
PT-2024-40774 · Glslang · Glslang
Name of the Vulnerable Software and Affected Versions: glslang affected versions not specified Description: The issue is related to a crash in the glslang software, specifically in the glslang::TInfoSinkBase::location, glslang::TParseContextBase::outputMessage, and glslang::TParseContextBase::err...
vulkan bug fix and enhancement update
An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
vulkan bug fix and enhancement update
An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
ALEA-2022:0354 vulkan bug fix and enhancement update
The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.6 BZ2016391 Rebase vulkan-headers in 8.6 BZ2016392 Rebase spirv-headers in 8.6 BZ201639...
vulkan bug fix and enhancement update
An update is available for spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Th...
vulkan bug fix and enhancement update
The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.6 BZ2016391 Rebase vulkan-headers in 8.6 BZ2016392 Rebase spirv-headers in 8.6 BZ201639...
ALEA-2021:3072 vulkan bug fix and enhancement update
The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.5 BZ1952989 Rebase vulkan-headers in 8.5 BZ1952990 Rebase spirv-headers in 8.5 BZ195299...
