Approved changes feed: RSS · Atom

cpe:2.3:a:virglrenderer_project:virglrenderer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVirglrenderer Project (1dd27db2-6f17-5668-993a-5f47a0b546c6)
ProductVirglrenderer (13555360-04f7-50a3-af8c-82f23ded5e6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/virglrenderer purl2cpe 2026-06-01 10:15:51.578547
pkg:deb/ubuntu/virglrenderer purl2cpe 2026-06-01 10:15:51.578549
pkg:github/freedesktop/virglrenderer purl2cpe 2026-06-01 10:15:51.578551
pkg:github/val-verde/virglrenderer purl2cpe 2026-06-01 10:15:51.578552
pkg:gitlab/redhat/virglrenderer purl2cpe 2026-06-01 10:15:51.578553
pkg:rpm/fedora/virglrenderer purl2cpe 2026-06-01 10:15:51.578555
pkg:rpm/opensuse/virglrenderer purl2cpe 2026-06-01 10:15:51.578556

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0135 vulnerable 2026-06-08 05:39:09.305314 Details available
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.
Published: 2022-08-25T00:00:00.000Z
Updated: 2024-08-02T23:18:41.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8003 vulnerable 2026-06-08 05:27:14.616714 Details available
A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_allocated_texture is not an appropriate place for a free.
Published: 2020-01-27T00:00:00.000Z
Updated: 2024-08-04T09:48:25.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8002 vulnerable 2026-06-08 05:27:14.615842 Details available
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
Published: 2020-01-27T00:00:00.000Z
Updated: 2024-08-04T09:48:24.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18391 vulnerable 2026-06-08 05:13:11.484103 Details available
A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.
Published: 2019-12-23T00:00:00.000Z
Updated: 2024-08-05T01:54:14.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18390 vulnerable 2026-06-08 05:13:11.483662 Details available
An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.
Published: 2019-12-23T00:00:00.000Z
Updated: 2024-08-05T01:54:14.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18389 vulnerable 2026-06-08 05:13:11.483193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18388 vulnerable 2026-06-08 05:13:11.482549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6386 vulnerable 2026-06-08 05:09:51.200057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6317 vulnerable 2026-06-08 05:09:51.094112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6210 vulnerable 2026-06-08 05:09:50.940978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6209 vulnerable 2026-06-08 05:09:50.940598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5994 vulnerable 2026-06-08 05:09:50.295829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5993 vulnerable 2026-06-08 05:09:50.295426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5957 vulnerable 2026-06-08 05:09:50.173659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5956 vulnerable 2026-06-08 05:09:50.173052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5937 vulnerable 2026-06-08 05:09:50.134587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5580 vulnerable 2026-06-08 05:09:47.231266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10214 vulnerable 2026-06-08 05:07:17.588716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10163 vulnerable 2026-06-08 05:07:17.446756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.