CVE-2017-5994

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0

Description The issue is related to a heap-based buffer overflow in the vrend create vertex elements state function, located in vrend renderer.c. This occurs when the num elements parameter is used to cause an out-of-bounds array access, leading to a denial of service and potential crash.

Recommendations For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vrend create vertex elements state function until a patch is available. Avoid using the num elements parameter in a way that could cause an out-of-bounds array access until the issue is resolved.