CVE-2017-5580 in virglrenderer
Summary
The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.
Reservation
01/25/2017
Disclosure
03/15/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98149 | virglrenderer Array Access tgsi_text.c parse_instruction memory corruption | 119 | Not defined | Official fix | CVE-2017-5580 |