CVE-2019-5068

CVE-2019-5068 affects X11 Mesa 3D Graphics Library, specifically version 19.1.2, with an exploitable shared memory permissions vulnerability that allows an attacker to access shared memory locally. The issue is addressed in vendor advisories (e.g., SUSE-SU-2021:3117-1) and OSV entries indicating ...

CVE-2026-40393

In Mesa, WebGPU is affected by out-of-bounds memory access in versions prior to 25.3.6 (and 26 prior to 26.0.1) due to untrusted input deciding the amount of data to allocate for alloca. The issue can lead to a high-severity impact and is exploitable over the network. A patched version is availab...

CVE-2013-1872

CVE-2013-1872 affects the Mesa graphics library, specifically Intel drivers in Mesa 8.0.x and 9.0.x. The root cause is an out-of-bounds array access in the fs_visitor::remove_dead_constants path, which could lead to a denial of service and potentially arbitrary code execution via 3D graphics vect...

CVE-2013-1993

CVE-2013-1993 involves multiple integer overflows in the X.org libGLX in Mesa 9.1.1 and earlier, enabling a X server to trigger allocation of insufficient memory and a buffer overflow via the XF86DRIOpenConnection and XF86DRIGetClientDriverName functions. Reported across various advisories (Mirac...

CVE-2023-45913

The Mesa graphics library (version v23.0.4 ) contains a NULL pointer dereference vulnerability within the dri2GetGlxDrawableFromXDrawableId() function. This issue occurs when an X11 server sends a DRI2_BufferSwapComplete event unexpectedly while the application is utilizing DRI3 . While the vulne...

CVE-2023-45922

A segmentation violation exists in the glx_pbuffer.c file of Mesa 23.0.4 when calling the __glXGetDrawableAttribute() function. While the vulnerability is disputed due to a lack of common scenarios where users require uninterrupted operation with an attacker-controlled server, it is documented as...

CVE-2023-45919

The Mesa graphics library, specifically version 23.0.4 , is affected by a buffer over-read vulnerability in the glXQueryServerString() function. While the vulnerability is disputed due to the rare requirement for uninterrupted operation with an attacker-controlled server, it has been addressed in...

CVE-2023-45931

The Mesa 3D Graphics Library version 23.0.4 is reported to contain a NULL pointer dereference vulnerability within the check_xshm() function specifically during the has_error state. However, this vulnerability is currently disputed because there is no scenario in which the vulnerability has been ...