{"id":"CVE-2023-45931","details":"Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.","modified":"2026-04-10T05:01:44.212431Z","published":"2024-03-27T04:15:11.250Z","references":[{"type":"WEB","url":"http://packetstormsecurity.com/files/176813/Mesa-23.0.4-Null-Pointer.html"},{"type":"WEB","url":"http://seclists.org/fulldisclosure/2024/Jan/59"},{"type":"WEB","url":"http://seclists.org/fulldisclosure/2024/Jan/71"},{"type":"ADVISORY","url":"https://seclists.org/fulldisclosure/2024/Jan/71"},{"type":"EVIDENCE","url":"https://gitlab.freedesktop.org/mesa/mesa/-/issues/9859"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.freedesktop.org/mesa/mesa","events":[{"introduced":"0"},{"last_affected":"b516242c157bf6d9e2ce3b15051b75fa3ec5a672"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"23.0.4"}]}}],"versions":["10.0-branchpoint","10.1-branchpoint","10.2-branchpoint","10.3-branchpoint","10.4-branchpoint","10.5-branchpoint","10.6-branchpoint","11.0-branchpoint","11.1-branchpoint","11.2-branchpoint","12.0-branchpoint","13.0-branchpoint","17.0-branchpoint","17.1-branchpoint","17.2-branchpoint","17.3-branchpoint","18.1-branchpoint","18.2-branchpoint","18.3-branchpoint","19.0-branchpoint","19.1-branchpoint","19.2-branchpoint","19.3-branchpoint","20.0-branchpoint","20.1-branchpoint","20.2-branchpoint","20.3-branchpoint","21.0-branchpoint","21.1-branchpoint","21.2-branchpoint","21.3-branchpoint","22.0-branchpoint","22.1-branchpoint","22.2-branchpoint","22.3-branchpoint","23.0-branchpoint","7.10-branchpoint","7.11-branchpoint","7.9-branchpoint","8.0-branchpoint","9.0-branchpoint","9.1-branchpoint","9.2-branchpoint","before_upgrade_03_01_05","blended_fountain","chadv/cros-gerrit-262788-base","chadv/cros-mesa-10.3-r13-vanilla","chadv/cros-mesa-10.3-r15-vanilla","chadv/cros-mesa-10.3-r28-vanilla","chadv/cros-mesa-10.3-r29-vanilla","chadv/cros-mesa-10.6-vanilla","chadv/cros-mesa-12.1.0-r3-vanilla","chadv/cros-mesa-12.1.0-r5-vanilla","chadv/cros-mesa-12.1.0-r7-vanilla","chadv/cros-mesa-17.1.0-r1-vanilla","chadv/cros-mesa-17.1.0-r2-vanilla","chadv/cros-mesa-17.1.1-r14-vanilla","chadv/cros-mesa-17.1.1-r3-vanilla","chadv/cros-mesa-17.2.3-vanilla","chadv/cros-mesa-18.1_pre1-r4-vanilla","chadv/cros-mesa-19.0-r1-vanilla","cros-mesa-10.3-r13-vanilla","cros-mesa-10.3-r15-vanilla","cros-mesa-10.3-r28-vanilla","cros-mesa-10.3-r29-vanilla","cros-mesa-10.6-vanilla","cros-mesa-12.1.0-r3-vanilla","cros-mesa-12.1.0-r5-vanilla","cros-mesa-12.1.0-r7-vanilla","cros-mesa-17.1.0-r1-vanilla","cros-mesa-17.1.0-r2-vanilla","cros-mesa-17.1.1-r14-vanilla","cros-mesa-17.1.1-r3-vanilla","cros-mesa-17.2.3-vanilla","cros-mesa-18.1_pre1-r4-vanilla","cros-mesa-19.0-r1-vanilla","gliding_penguin","jump_and_click","kw-mesa-1","mesa-23.0.0","mesa-23.0.0-rc1","mesa-23.0.0-rc2","mesa-23.0.0-rc3","mesa-23.0.0-rc4","mesa-23.0.0-rc5","mesa-23.0.1","mesa-23.0.2","mesa-23.0.3","mesa-23.0.4","mesa-6_5-20060712","mesa_20050504","mesa_20050526","mesa_20050610","mesa_20050715","mesa_20060325","mesa_3_1_beta_3","mesa_3_3","mesa_3_5","mesa_4_0","mesa_4_1","mesa_6_3","mesa_6_3_1","mesa_6_3_1_1","mesa_6_3_2","mesa_6_5","mesa_6_5_1","mesa_6_5_2","mesa_6_5_3","mesa_6_5_3_rc2","mesa_6_5_3_rc3","mesa_6_5_3_rc4","mesa_7_1_rc1","mesa_7_1_rc2","mesa_7_1_rc3","mesa_7_1_rc4","noisy_cube","post-merge-glsl-compiler-1","pre-merge-glsl-compiler-1","red_tinted_cube","rotating_gears","shimmering_gears","skl-fast-clear-v08.00","skl-fast-clear-v11.00","skl-fast-clear-v12.00","snb-magic","texmem_0_2_20060912","the_perfect_frag","trunk_20040329","unichrome-last-xinerama","vulkan-protex-2015.09.24.r01-base"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45931.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}