CVE-2026-40393

In Mesa, WebGPU is affected by out-of-bounds memory access in versions prior to 25.3.6 (and 26 prior to 26.0.1) due to untrusted input deciding the amount of data to allocate for alloca. The issue can lead to a high-severity impact and is exploitable over the network. A patched version is availab...

CVE-2026-40393

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca...

CVE-2026-40393

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca...

CVE-2026-40393

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca...

PT-2026-32182

Name of the Vulnerable Software and Affected Versions Mesa versions prior to 25.3.6 and versions prior to 26.0.1 Description An out-of-bounds memory access issue exists in the WebGPU component of Mesa. The amount of data to be allocated is determined by an untrusted source and then used in the...

Mesa 缓冲区错误漏洞

Mesa is an open-source proxy modeling framework developed by Mesa projects. Versions of Mesa prior to 25.3.6 and 26.0.1 contain a buffer error vulnerability. This vulnerability stems from the fact that the amount of data to be allocated in WebGPU depends on an untrusted party, which is then used...

Linux Distros Unpatched Vulnerability : CVE-2026-40393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted...

CVE-2026-29075

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

CVE-2026-29075

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

CVE-2026-29075 Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

CVE-2026-29075

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

CVE-2026-29075 Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

CVE-2026-29075

Mesa CVE-2026-29075 affects the Mesa library (versions ≤ 3.5.0). The vulnerability arises when untrusted code is checked out in the benchmarks.yml workflow, potentially allowing code execution in a privileged runner. The issue has been patched via commit c35b8cd. Public-facing exploitation detail...

CVE-2026-29075 Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner

Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commi...

PT-2026-23726

Name of the Vulnerable Software and Affected Versions Mesa versions prior to 3.5.1 Description Mesa is a Python library used for agent-based modeling and simulating complex systems. A flaw exists where checking out untrusted code within the benchmarks.yml workflow could allow for code execution...

Mesa 代码注入漏洞

Mesa is an open-source proxy modeling framework developed by Mesa developers. Versions of Mesa 3.5.0 and earlier contained a code injection vulnerability. This vulnerability occurred when untrusted code was checked out in the workflow, potentially allowing code execution...

MiracleLinux 4 : mesa-9.0-0.8.AXS4.3 (AXSA:2013-500:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-500:03 advisory. Mesa Security issues fixed with this release: CVE-2013-1872 No description available at the time of writing, please refer to the CVE links below...

MiracleLinux 3 : mesa-6.5.1-7.11.0.1.AXS3 (AXSA:2013-539:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-539:01 advisory. Mesa Security issues fixed with this release: CVE-2013-1993 Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger...

MiracleLinux 4 : mesa-9.0-0.8.AXS4.3 (AXSA:2013-474:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-474:02 advisory. Mesa Security issues fixed with this release: CVE-2013-1872 CVE-2013-1993 No description available at the time of writing, please refer to the CVE...

CVE-2023-45913

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId. This vulnerability is triggered when the X11 server sends an DRI2BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is ...