CVE-2020-8002

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS).

• CWE-476

• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340Patch, Third Party Advisory
• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=572a36879701598fa727f50313508be99865b58fPatch, Third Party Advisory
• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=725e12beba4a41934f0ab62d399b5d4de2d13190Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00017.htmlMailing List, Third Party Advisory
• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340Patch, Third Party Advisory
• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=572a36879701598fa727f50313508be99865b58fPatch, Third Party Advisory
• https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=725e12beba4a41934f0ab62d399b5d4de2d13190Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00017.htmlMailing List, Third Party Advisory

Published

Jan 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7996htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows …6.1
• CVE-2020-7997ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the…6.1
• CVE-2020-7998An arbitrary file upload vulnerability has been discovered i…8.8
• CVE-2020-7999The Intellian Aptus application 1.0.2 for Android has hardco…9.8
• CVE-2020-8000Intellian Aptus Web 1.24 has a hardcoded password of 1234567…9.8
• CVE-2020-8001The Intellian Aptus application 1.0.2 for Android has a hard…9.8
• CVE-2020-8003A double-free vulnerability in vrend_renderer.c in virglrend…5.5
• CVE-2020-8004STMicroelectronics STM32F1 devices have Incorrect Access Con…7.5
• CVE-2020-8006The server in Circontrol Raption through 5.11.2 has a pre-au…8.8
• CVE-2020-8007The pwrstudio web application of EV Charger (in the server i…9.8
• CVE-2020-8009AVB MOTU devices through 2020-01-22 allow /.. Directory Trav…7.5
• CVE-2020-8010CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.…9.8