CVE-2022-0135

    Dashboard / Vulnerabilities / CVE-2022-0135

    CVE-2022-0135

    Published: 25 Aug 2022Last Modified: 12 Aug 2026

    Summary:

    Details: An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0135.json, https://nvd.nist.gov/vuln/detail/CVE-2022-0135, https://security.gentoo.org/glsa/202210-05, https://bugzilla.redhat.com/show_bug.cgi?id=2037790, https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 66c57963aaf09a1c41056bd2a001da1d51957a14
    Fixed -f70a6640cac059c29bf3a6f6851ff67d809543ef

    Affected versions

    virglrenderer-0.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-0135 | CVE-DB