Every CVE Search/ Get API key

CVE-2019-18390

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in...

7.1 HighFix available

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.35%Down 1.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.1

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
CVE-2019-18390
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:P/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
CVE-2019-18390
Updated
2026-11-02
EUVDEUVD-2019-8175 No score

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
EUVD-2019-8175
Updated
2026-11-03
GitHub AdvisoriesGHSA-gp3m-wg52-v97j 7.1

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in...

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
GHSA-gp3m-wg52-v97j
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2019-18390 7.1

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
ALPINE-CVE-2019-18390
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2019-18390 7.1

CVE-2019-18390 does not affect BellSoft software

Record
BELL-CVE-2019-18390
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 8 moreShow less
OSV 7.1

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
CVE-2019-18390
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-18390 7.1

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
DEBIAN-CVE-2019-18390
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2021-1427 7.8

virglrenderer security update

The virgil3d rendering library is a library used by qemu to implement 3D GPU support for the virtio GPU.

Security Fix(es):

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.(CVE-2019-18390)

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.(CVE-2019-18388)

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.(CVE-2019-18391)

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.(CVE-2019-18389)

Record
OESA-2021-1427
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-18390 7.1

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

Record
UBUNTU-CVE-2019-18390
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2020:0058-1 No score

Security update for virglrenderer

This update for virglrenderer fixes the following issues:

  • CVE-2019-18388: Fixed a null pointer dereference which could have led to denial of service (bsc#1159479).
  • CVE-2019-18390: Fixed an out of bound read which could have led to denial of service (bsc#1159478).
  • CVE-2019-18389: Fixed a heap buffer overflow which could have led to guest escape or denial of service (bsc#1159482).
  • CVE-2019-18391: Fixed a heap based buffer overflow which could have led to guest escape or denial of service (bsc#1159486).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0058-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11499-1 No score

libvirglrenderer1-0.9.1-1.3 on GA media

These are all security issues fixed in the libvirglrenderer1-0.9.1-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11499-1
Updated
2026-11-02
OSVSUSE-SU-2020:0016-1 No score

Security update for virglrenderer

This update for virglrenderer fixes the following issues:

  • CVE-2019-18388: Fixed a null pointer dereference which could have led to denial of service (bsc#1159479).
  • CVE-2019-18390: Fixed an out of bound read which could have led to denial of service (bsc#1159478).
  • CVE-2019-18389: Fixed a heap buffer overflow which could have led to guest escape or denial of service (bsc#1159482).
  • CVE-2019-18391: Fixed a heap based buffer overflow which could have led to guest escape or denial of service (bsc#1159486).
Record
SUSE-SU-2020:0016-1
Updated
2026-11-02
OSVSUSE-SU-2020:0017-1 No score

Security update for virglrenderer

This update for virglrenderer fixes the following issues:

  • CVE-2019-18388: Fixed a null pointer dereference which could have led to denial of service (bsc#1159479).
  • CVE-2019-18390: Fixed an out of bound read which could have led to denial of service (bsc#1159478).
  • CVE-2019-18389: Fixed a heap buffer overflow which could have led to guest escape or denial of service (bsc#1159482).
  • CVE-2019-18391: Fixed a heap based buffer overflow which could have led to guest escape or denial of service (bsc#1159486).
Record
SUSE-SU-2020:0017-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
virglrenderer
Alpine:v3.11
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.12
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.13
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.14
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.15
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.16
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.17
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.18
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.19
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.20
 before 0.8.1-r0
0.8.1-r0
Show 33 moreShow less
Affected packages
PackageAffectedFixed
virglrenderer
Alpine:v3.21
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.22
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.23
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Alpine:v3.24
 before 0.8.1-r0
0.8.1-r0
virglrenderer
Debian:12
 before 0.8.1-1
0.8.1-1
virglrenderer
Debian:13
 before 0.8.1-1
0.8.1-1
virglrenderer
Debian:14
 before 0.8.1-1
0.8.1-1
virglrenderer
Debian:10
From an advisory covering 7 CVEs
 before 0.7.0-2+deb10u1, plus listed versions
0.7.0-2
0.7.0-2+deb10u1
virglrenderer
openEuler:20.03-LTS-SP1
From an advisory covering 4 CVEs
 before 0.7.0-2.oe1
0.7.0-2.oe1
virglrenderer
openEuler:20.03-LTS-SP2
From an advisory covering 4 CVEs
 before 0.7.0-2.oe1
0.7.0-2.oe1
virglrenderer
SUSE:HPE Helion OpenStack 8
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:OpenStack Cloud 7
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:OpenStack Cloud 8
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Enterprise Storage 5
From an advisory covering 4 CVEs
 before 0.5.0-12.3.1
0.5.0-12.3.1
virglrenderer
SUSE:Linux Enterprise Module for Server Applications 15
From an advisory covering 4 CVEs
 before 0.6.0-4.3.1
0.6.0-4.3.1
virglrenderer
SUSE:Linux Enterprise Module for Server Applications 15 SP1
From an advisory covering 4 CVEs
 before 0.6.0-4.3.1
0.6.0-4.3.1
virglrenderer
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.6.0-10.6.0-2
 None known
virglrenderer
openSUSE:Leap 15.1
From an advisory covering 4 CVEs
 before 0.6.0-lp151.4.3.1
0.6.0-lp151.4.3.1
virglrenderer
openSUSE:Tumbleweed
From an advisory covering 13 CVEs
 before 0.9.1-1.3
0.9.1-1.3

History

History
RecordedChangedSources
affected, facts
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-18390 is a high vulnerability (CVSS 7.1) in Virglrenderer Project Virglrenderer, published December 23, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in virglrenderer 0.8.1-r0.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open