CVE-2019-18388: Null Pointer Dereference
Published Oct 25, 2019
·Updated
A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.
Affected Software
3 affected components
Virglrenderer Project Virglrenderer<=0.8.0
openSUSE Leap=15.1
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Oct 25, 2019
Data Sourced
01:26 PM
DescriptionSeverityAffected Software
Dec 23, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18388?
The severity of CVE-2019-18388 is medium with a CVSS score of 5.5.
2
How does CVE-2019-18388 affect the software?
CVE-2019-18388 affects Virglrenderer version 0.8.0 and openSUSE Leap 15.1, as well as Debian Linux 10.0.
3
How can CVE-2019-18388 be exploited?
CVE-2019-18388 can be exploited by guest OS users sending malformed commands, leading to a NULL pointer dereference and denial of service.
4
Where can I find more information about CVE-2019-18388?
You can find more information about CVE-2019-18388 at the following references: [1] [2] [3]
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-18388?
The Common Weakness Enumeration (CWE) ID for CVE-2019-18388 is 476.