CVE-2022-0135

2022-08-2500:00:00

CWE-787

redhat

www.cve.org

virgl renderer

out-of-bounds write

denial of service

code execution

AI Score

7.8

Confidence

High

EPSS

Percentile

15.7%

JSON

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "virglrenderer",
    "versions": [
      {
        "version": "virglrenderer 0.8.1 and after",
        "status": "affected"
      }
    ]
  }
]