SUSE CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

Buffer overflow vulnerability in virglrenderer 'vrend_renderer_transfer_write_iov' function

virglrenderer is a VirGL virtual OpenGL renderer. A buffer overflow vulnerability exists in the 'vrendrenderertransferwriteiov' function in the vrendrenderer.c file in virglrenderer 0.8.0 and earlier. The vulnerability stems from a networked system or product performing operations in memory witho...