CVE-2020-8002
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to...
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
CVE-2020-8002- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
CVE-2020-8002- Updated
- 2026-11-02
EUVDEUVD-2020-28915 No score
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
EUVD-2020-28915- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-224g-5gvw-3m56
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to...
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
GHSA-224g-5gvw-3m56- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
CVE-2020-8002- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-8002
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
DEBIAN-CVE-2020-8002- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2022-1570
virglrenderer security update
The virgil3d rendering library is a library used by qemu to implement 3D GPU support for the virtio GPU.
Security Fix(es):
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).(CVE-2020-8002)
A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_allocated_texture is not an appropriate place for a free.(CVE-2020-8003)
- Record
OESA-2022-1570- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-8002
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).
- Record
UBUNTU-CVE-2020-8002- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11499-1 No score
libvirglrenderer1-0.9.1-1.3 on GA media
These are all security issues fixed in the libvirglrenderer1-0.9.1-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11499-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
virglrendererDebian:12 |
before 0.8.2-1 | 0.8.2-1 |
virglrendererDebian:13 |
before 0.8.2-1 | 0.8.2-1 |
virglrendererDebian:14 |
before 0.8.2-1 | 0.8.2-1 |
virglrendererDebian:10 From an advisory covering 7 CVEs |
before 0.7.0-2+deb10u1, plus listed versions 0.7.0-2 |
0.7.0-2+deb10u1 |
virglrendereropenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 0.7.0-3.oe1 | 0.7.0-3.oe1 |
virglrendereropenEuler:20.03-LTS-SP2 From an advisory covering 2 CVEs |
before 0.7.0-3.oe1 | 0.7.0-3.oe1 |
virglrendereropenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 0.7.0-3.oe1 | 0.7.0-3.oe1 |
virglrendereropenSUSE:Tumbleweed From an advisory covering 13 CVEs |
before 0.9.1-1.3 | 0.9.1-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-8002 is a medium vulnerability (CVSS 5.5) in Virglrenderer Project Virglrenderer, published January 27, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in virglrenderer 0.8.2-1.
References
gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=572a36879701598fa727f50313508be99865b58f
lists.debian.org/debian-lts-announce/2022/12/msg00017.html
nvd.nist.gov/vuln/detail/CVE-2020-8002
github.com/advisories/GHSA-224g-5gvw-3m56
Show 18 moreShow less
security-tracker.debian.org/tracker/CVE-2020-8002
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1570
ubuntu.com/security/CVE-2020-8002
cve.org/CVERecord?id=CVE-2020-8002
suse.com/security/cve/CVE-2016-10214