CVE-2020-8002: Null Pointer Dereference
Published Jan 27, 2020
·Updated
A NULL pointer dereference in vrendrenderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
Affected Software
2 affected components
Virglrenderer Project Virglrenderer<=0.8.1
Debian Debian Linux=10.0
Remediation
Event History
Jan 27, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-8002?
CVE-2020-8002 is a vulnerability in virglrenderer that allows attackers to cause a denial of service through certain commands.
2
How does CVE-2020-8002 work?
CVE-2020-8002 occurs due to a NULL pointer dereference in vrend_renderer.c in virglrenderer.
3
What is the severity of CVE-2020-8002?
The severity of CVE-2020-8002 is medium with a CVSS score of 5.5.
4
Which software versions are affected by CVE-2020-8002?
Versions up to and including 0.8.1 of virglrenderer and Debian Linux 10.0 are affected by CVE-2020-8002.
5
How can I fix CVE-2020-8002?
To fix CVE-2020-8002, it is recommended to update to a version of virglrenderer that is higher than 0.8.1.