CVE-2017-6209

Stack-based buffer overflow in the parseidentifier function in tgsitext.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service out-of-bounds array access and QEMU process crash via vectors related to parsing...

CVE-2017-5994

CVE-2017-5994 : Heap-based buffer overflow in virglrenderer’s vrend_create_vertex_elements_state (vrend_renderer.c) affects versions before 0.6.0. Local guest OS users can trigger an out-of-bounds access leading to a denial of service. Mitigation: upgrade virglrenderer to 0.6.0 or newer (see open...

CVE-2017-6317

CVE-2017-6317 affects virglrenderer. A memory leak in the add_shader_program path (vrend_renderer.c) prior to version 0.6.0 can cause host memory consumption and a local DoS. A fix is available in virglrenderer 0.6.0 and later; upgrades to this version are recommended where affected.

CVE-2017-6210

**CVE-2017-6210 affects virglrenderer (vrend_decode_reset in vrend_decode.c) with exploitation by local guest OS users. It allows a denial of service via a NULL pointer dereference, causing the QEMU process to crash when context 0 is destroyed, and is rated CVSSv3.0: 6.5 (MEDIUM) / CVSSv2.0: 2.1 ...

CVE-2017-5994

Heap-based buffer overflow in the vrendcreatevertexelementsstate function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service out-of-bounds array access and crash via the numelements parameter...

CVE-2017-6210

The vrenddecodereset function in vrenddecode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service NULL pointer dereference and QEMU process crash by destroying context 0 zero...

CVE-2017-6209

CVE-2017-6209 affects virglrenderer (Gallium driver) before 0.6.0. The vulnerability is a stack-based buffer overflow in the parse_identifier function in tgsi_text.c within the TGSI auxiliary module, exploitable by local guest OS users to cause a denial of service via out-of-bounds access, potent...

CVE-2017-6386

CVE-2017-6386 affects virglrenderer: memory leak in vrend_create_vertex_elements_state (vrend_renderer.c) can cause host memory exhaustion via a high volume of VIRGL_OBJECT_VERTEX_ELEMENTS from a local guestOS user, leading to DoS. The provided documents do not specify a patch version or remediat...

CVE-2017-6317

Memory leak in the addshaderprogram function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service host memory consumption via vectors involving the sprog variable...

CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

UBUNTU-CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

DEBIAN-CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

CVE-2017-5957 is a stack-based buffer overflow in the function vrend_decode_set_framebuffer_state() within virglrenderer (vrend_decode.c), used by Quick Emulator (QEMU). The overflow is triggered via the nr_cbufs argument, allowing a local guest user to crash the application (DoS). The descriptio...

CVE-2017-6355

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...

UBUNTU-CVE-2017-6355

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...

DEBIAN-CVE-2017-6355

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...

Integer overflow

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...