Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Out-of-bounds memory access in Mesa's WebGPU
published 5 months ago
Summary
An update is available for Mesa to fix a security issue that could allow an attacker to access memory outside of its allowed limits. This could potentially allow an attacker to execute malicious code. To protect your system, apply the available update as soon as possible.
Original advisory text
Security update for Mesa
This update for Mesa fixes the following issue:
- CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on
an untrusted party (bsc#1261998).
- CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on
an untrusted party (bsc#1261998).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20261845-1/ Vendor Advisory
- https://bugzilla.suse.com/1261998 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-40393 URL
Timeline
Published13 May 2026
Updated21 May 2026
First seen21 May 2026
Sources
SUSE-SU-2026:1845-1 · OSV
Track software like this
Free during beta