Mesa vulnerabilities

2 known vulnerabilities in Mesa from Mesa3d. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Mesa: Out-of-bounds Write

  CVE-2026-40393Apr 12, 2026Mesa3d

  In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.

• 7.5 High severity

  mesa: NULL Pointer Dereference

  CVE-2023-45931Mar 27, 2024Mesa3dEPSS 1.03%

  Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.