ME
Product
Mesa
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add Mesa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40393 | 9.8 | Apr 12 | In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then… Affected: before 25.3.6; 26.0.0 before 26.0.1 |
| CVE-2023-45931 | 7.5 | Mar 27 | Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state Affected: 23.0.4 |
| CVE-2023-45913 | 6.2 | Mar 27 | Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId() Affected: 23.0.4 |
| CVE-2023-45919 | 5.3 | Mar 27 | Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString() Affected: 23.0.4 |
| CVE-2019-5068 | 4.4 | Nov 5 | An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2 Affected: 19.1.2 |
| CVE-2023-45922 | 4.3 | Mar 27 | glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute() Affected: 23.0.4 |
| CVE-2013-1872 | – | Aug 19 | The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via… Affected: 9.0; 9.0.1; 9.0.2; 9.0.3; 8.0; 8.0.1; +4 more |
| CVE-2013-1993 | – | Jun 15 | Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the… Affected: through 9.1.1; 9.0; 9.0.1; 9.0.2; 9.0.3; 9.1 |
Showing 8