Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-40393

Опубликовано: 12 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.

РелизСтатусПримечание
devel

not-affected

26.0.3-1ubuntu1
esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

released

23.2.1-1ubuntu3.1~22.04.4
noble

released

25.2.8-0ubuntu0.24.04.2
questing

released

25.2.8-0ubuntu0.25.10.2
resolute

not-affected

26.0.3-1ubuntu1

Показывать по

EPSS

Процентиль: 37%
0.00427
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
7 месяцев назад

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.

CVSS3: 8.1
msrc
7 месяцев назад

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.

CVSS3: 9.8
debian
7 месяцев назад

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

suse-cvrf
6 месяцев назад

Security update for Mesa

suse-cvrf
6 месяцев назад

Security update for Mesa

EPSS

Процентиль: 37%
0.00427
Низкий

9.8 Critical

CVSS3