TI-2023-24659 CVE-2023-45919 · GHSA-fwp2-wq2h-xqvw
Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString().
Priority MEDIUM 57
Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString().
mesa3d
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
mesa3d records in CISA KEVNo mesa3d vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2026-29161 CVE-2026-40393 · GHSA-w54f-pw7x-c532
Out-of-bounds write in mesa3d Mesa
Priority MEDIUM 43
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
TI-2023-24666 CVE-2023-45931 · GHSA-4gxp-6chj-c99r
Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the…
Priority MEDIUM 41
Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state.
TI-2013-01765 CVE-2013-1993 · GHSA-4j5x-8p5g-fw48
Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to…
Priority LOW 35
Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRI…
TI-2013-01654 CVE-2013-1872 · GHSA-847q-55hx-98vj
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a…
Priority LOW 35
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger…
TI-2023-24658 CVE-2023-45913 · GHSA-q4fq-56x3-rq98
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function…
Priority LOW 27
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId().
TI-2023-24661 CVE-2023-45922 · GHSA-9gv2-h67q-4h2v
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when…
Priority LOW 21
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute().
TI-2019-03529 CVE-2019-5068 · GHSA-rrg9-xrw3-h9vv
Incorrect permission assignment in Mesa 3D X11 Graphics library
Priority LOW 21
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2.