CVE-2017-6355

CVE-2017-6355 affects virglrenderer (vrend_renderer.c: vrend_create_shader). An integer overflow in vrend_create_shader allows a local guest OS user to trigger an out-of-bounds access, leading to a denial of service (process crash). The issue is described as exploitable via crafted pkt_length and...