CVE-2023-45931

Katalog CVE

CVSS 7.5 · High EPSS 1,0%

Kerentanan NULL Pointer Dereference pada mesa3d mesa. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.

Rincian

Terbit di NVD

27 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.freedesktop.org/mesa/mesa/-/issues/9859 exploit · advisory vendor
• https://seclists.org/fulldisclosure/2024/Jan/71 mailing list · advisory pihak ketiga
• http://packetstormsecurity.com/files/176813/Mesa-23.0.4-Null-Pointer.html
• http://seclists.org/fulldisclosure/2024/Jan/59
• http://seclists.org/fulldisclosure/2024/Jan/71