CVE-2017-5580 in virglrenderer
摘要 (英语)
The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
预定
2017-01-25
披露
2017-03-15
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 98149 | virglrenderer Array Access tgsi_text.c parse_instruction 内存损坏 | 119 | 未定义 | 官方修复 | CVE-2017-5580 |