CVE-2017-6355

Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service…

published March 10, 2017

CVSS
—
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00430 · 35.9th percentile
Published
2017-03-10T02:00Z
EPSS history
Timeline
  • 10 MAR 02:00Z
    Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service…
    cvelistv5