Most recent entries from all

bdu:2020-00553

Withdrawn: BELL-CVE-2019-18390 — CVE-2019-18390 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2019-47193

EUVD-2026-58722

fkie_cve-2019-18390

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

GHSA-gp3m-wg52-v97j

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

gsd-2019-18390

OESA-2021-1427 — virglrenderer security update

Affected: openEuler:20.03-LTS-SP1: virglrenderer, openEuler:20.03-LTS-SP2: virglrenderer

The virgil3d rendering library is a library used by qemu to implement 3D GPU support for the virtio GPU. Security Fix(es): An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.(CVE-2019-18390) A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.(CVE-2019-18388) A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.(CVE-2019-18391) A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.(CVE-2019-18389)

openSUSE-SU-2020:0058-1 — Security update for virglrenderer

Security update for virglrenderer

SUSE-SU-2020:0016-1 — Security update for virglrenderer

Security update for virglrenderer

UBUNTU-CVE-2019-18390

Affected: Ubuntu:18.04:LTS: virglrenderer

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.