Mesa3d vulnerabilities
We track 2 vulnerabilities in Mesa3d products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 12, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Mesa3d vulnerabilities
- 9.8 Critical severity
Mesa: Out-of-bounds Write
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
- 7.5 High severity
mesa: NULL Pointer Dereference
Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.