CVE-2017-6209 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Virglrenderer
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 79.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 15
Latest updateMay 17
Description
Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0
Affected Packages2 packages
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-rm3c-835j-xh83: Stack-based buffer overflow in the parse_identifier function in tgsi_text↗2022-05-17
CVEList
▶
OSV
▶
📋Vendor Advisories
1Debian▶
CVE-2017-6209: virglrenderer - Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in t...↗2017