PT-2024-41090 · Git+1 · Shaderc

Published

2024-12-10

·

Updated

2024-12-10

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions glslang (affected versions not specified)
Description The software contains a heap-buffer-overflow read issue. The crash occurs during the parseShaderStrings function within the glslang::HlslParseContext. This function is called by acceptCompilationUnit and acceptDeclaration within the glslang::HlslGrammar class.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

OSV-2024-1348

Affected Products

Shaderc