SUSE SLES15: libQt53DAnimation-devel / libQt53DAnimation5 / libQt53DCore-devel / etc (SUSE-SU-2024:2976-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2976-1 advisory. - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228204 Other fixes: - Check for a nullptr returne...

SUSE SLED15: libQt53DAnimation-devel / libQt53DAnimation5 / libQt53DCore-devel / etc (SUSE-SU-2024:2984-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2984-1 advisory. - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228204 - Checked for a nullptr...

SUSE SLES15 Security Update : libqt5-qtquick3d (SUSE-SU-2024:2985-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2985-1 advisory. - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228199 - Fixed progressive anti-aliasing, which doesn't work if any...

SUSE-SU-2024:2984-1 Security update for libqt5-qt3d

This update for libqt5-qt3d fixes the following issues: - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class bsc1228204 - Checked for a nullptr returned from the shader manager - Fill image with transparency by default to avoid having junk if it's not filled properly...

SUSE-SU-2024:2976-1 Security update for libqt5-qt3d

This update for libqt5-qt3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228204 Other fixes: - Check for a nullptr returned from the shader manager - Fill image with transparency by default to avoid having junk if it's not...

SUSE-SU-2024:2975-1 Security update for libqt5-qt3d

This update for libqt5-qt3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228204 Other fixes: - Check for a nullptr returned from the shader manager - Fill image with transparency by default to avoid having junk if it's not...

NVIDIA GPU Compiler Driver Shader Functionality out-of-bounds read vulnerability

Talos Vulnerability Report TALOS-2024-1956 NVIDIA GPU Compiler Driver Shader Functionality out-of-bounds read vulnerability July 23, 2024 CVE Number CVE-2024-0107 SUMMARY An out-of-bounds read vulnerability exists in the Shader Functionality functionality of NVIDIA GPU Compiler Driver 551.61,...

SUSE CVE-2024-6600

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...

CVE-2024-6600

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...

[SECURITY] Fedora 40 Update: qt6-qtshadertools-6.7.1-2.fc40

Qt6 - Qt Shader Tools module builds on the SPIR-V Open Source Ecosystem...

The vulnerability of shader functions in VMware Fusion and Vmware Workstation allows attackers to trigger a service failure.

The vulnerability of shader functions in VMware Fusion and Vmware Workstation lies in improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

VMware Fusion 13.0.x < 13.5.2 Multiple Vulnerabilities (VMSA-2024-0010)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 13.0.x prior to 13.5.2. It is, therefore, affected by multiple vulnerabilities. - VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. CVE-2024-22267 - VMware Workstation...

CVE-2024-22268

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-22268

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-22268

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-22268

CVE-2024-22268 affects VMware Workstation and Fusion. A heap buffer-overflow in the Shader functionality can be exploited by a non-administrative attacker with access to a VM that has 3D graphics enabled to cause a denial of service. Public details from connected sources confirm affected products...

CVE-2024-22268

VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition...

CVE-2024-21979

An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution...

CVE-2024-21972

An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution...

CVE-2024-21972

CVE-2024-21972 concerns an out-of-bounds/write vulnerability in the AMD Radeon DirectX 11 shader path. The TALOS report anchors the issue to the AMD Radeon DirectX 11 Driver atidxx64.dll (version 31.0.21018.6011), describing an arbitrary write vulnerability triggered by a malformed shader file, l...