CVE-2016-10163

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0

Description The issue is related to a memory leak in the vrend renderer context create internal function in vrend decode.c. This allows local guest OS users to cause a denial of service by repeatedly creating a decode context, resulting in host memory consumption.

Recommendations For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the creation of decode contexts to minimize the risk of exploitation.