{"id":"CVE-2025-3010","summary":"Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference","details":"A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of the file glslang/MachineIndependent/Intermediate.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.","modified":"2026-08-12T03:51:30.352038007Z","published":"2025-03-31T20:00:12.256Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-404","CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3010.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3010.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3010"},{"type":"ADVISORY","url":"https://vuldb.com/?id.302060"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.524561"},{"type":"REPORT","url":"https://github.com/KhronosGroup/glslang/issues/3903"},{"type":"REPORT","url":"https://github.com/KhronosGroup/glslang/issues/3903#issue-2927492534"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.302060"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/khronosgroup/glslang","events":[{"introduced":"1062752a891c95b2bfeed9e356562d88f9df84ac"},{"last_affected":"1062752a891c95b2bfeed9e356562d88f9df84ac"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"15.1.0"},{"last_affected":"15.1.0"}]}}],"versions":["15.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3010.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}]}