The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virglrenderer | Virglrenderer_project | * | 0.5.0 (including) |
| Virglrenderer | Ubuntu | artful | * |
| Virglrenderer | Ubuntu | upstream | * |
| Virglrenderer | Ubuntu | yakkety | * |
| Virglrenderer | Ubuntu | zesty | * |