CVE-2019-5068

CVE-2019-5068 affects X11 Mesa 3D Graphics Library, specifically version 19.1.2, with an exploitable shared memory permissions vulnerability that allows an attacker to access shared memory locally. The issue is addressed in vendor advisories (e.g., SUSE-SU-2021:3117-1) and OSV entries indicating ...

CVE-2026-40393

In Mesa, WebGPU is affected by out-of-bounds memory access in versions prior to 25.3.6 (and 26 prior to 26.0.1) due to untrusted input deciding the amount of data to allocate for alloca. The issue can lead to a high-severity impact and is exploitable over the network. A patched version is availab...

CVE-2013-1872

CVE-2013-1872 affects the Mesa graphics library, specifically Intel drivers in Mesa 8.0.x and 9.0.x. The root cause is an out-of-bounds array access in the fs_visitor::remove_dead_constants path, which could lead to a denial of service and potentially arbitrary code execution via 3D graphics vect...

CVE-2013-1993

CVE-2013-1993 involves multiple integer overflows in the X.org libGLX in Mesa 9.1.1 and earlier, enabling a X server to trigger allocation of insufficient memory and a buffer overflow via the XF86DRIOpenConnection and XF86DRIGetClientDriverName functions. Reported across various advisories (Mirac...

CVE-2023-45913

The Mesa graphics library (specifically version v23.0.4 ) contains a NULL pointer dereference vulnerability within the dri2GetGlxDrawableFromXDrawableId() function. This flaw occurs when an X11 server unexpectedly sends a DRI2_BufferSwapComplete event while the application is utilizing DRI3 . Alt...

CVE-2023-45922

The Mesa graphics library (version 23.0.4) is vulnerable to a segmentation violation within the glx_pbuffer.c file when calling the __glXGetDrawableAttribute() function. While the vulnerability is disputed due to the rarity of specific user requirements for uninterrupted operation with an attacke...

CVE-2023-45919

The Mesa graphics library (specifically version 23.0.4 ) contains a buffer over-read vulnerability in the glXQueryServerString() function. While the issue is noted as disputed due to the rarity of specific scenarios involving attacker-controlled servers, several distributions have released patche...

CVE-2023-45931

The Mesa 3D Graphics Library version 23.0.4 is reportedly affected by a NULL pointer dereference vulnerability within the check_xshm() function during the has_error state. However, this vulnerability is currently disputed as no specific scenario has been demonstrated to trigger the flaw. No explo...