CVE-2023-45919

5.3 MEDIUM

Published: March 27, 2024 Modified: November 04, 2025

Description

Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://seclists.org/fulldisclosure/2024/Jan/47

Source: cve@mitre.org

Mailing List Third Party Advisory

https://gitlab.freedesktop.org/mesa/mesa/-/issues/9858

Source: cve@mitre.org

Exploit Vendor Advisory

http://packetstormsecurity.com/files/176802/Mesa-23.0.4-Buffer-Overflow.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2024/Jan/47

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

https://gitlab.freedesktop.org/mesa/mesa/-/issues/9858

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Vendor Advisory

5 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.3 / 10.0

EPSS (Exploit Probability)

0.1%

23th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-126

Affected Vendors

mesa3d

Related CVEs