Medium
Security advisory
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-5068
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:36 UTC · Revision 1
Source evidence
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
osv:CVE-2019-5068
Complete source record
{
"id": "f94d02d4ff7b3324ac7a39b3f7ac1e04248a65e4451f6704b56dbc4a4e384946",
"url": "https://osv.dev/vulnerability/CVE-2019-5068",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-5068",
"summary": "An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.",
"evidence": "osv:CVE-2019-5068",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2019-5068",
"aliases": [
"CVE-2019-5068"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://gitlab.freedesktop.org/mesa/mesa",
"type": "GIT",
"events": [
{
"introduced": "fe1f7b538b7e8e4bd221c5d52ae72a3721c6aa08"
},
{
"last_affected": "f9c9933f9c7f72f12be27ccda98c965c75f08a12"
},
{
"fixed": "02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mesa3d:mesa:19.1.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "19.1.2"
},
{
"last_affected": "19.1.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"19.1.2",
"8.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5068.json",
"vanir_signatures": [
{
"id": "CVE-2019-5068-264b9e69",
"digest": {
"threshold": 0.9,
"line_hashes": [
"21031935878858951913416298586072437731",
"184280298973286500260326107981170683022",
"227604961755013890913276013896056655807",
"298902272480603942530679806275904005723"
]
},
"source": "https://gitlab.freedesktop.org/mesa/mesa@02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"target": {
"file": "src/gallium/winsys/sw/dri/dri_sw_winsys.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-5068-28199632",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261953367349776503054253862037111498413",
"116667155956020564493198761042814679808",
"96505939772392929618395239514449680247",
"105648963479573839190880468283030598731",
"34958545042316192794853523886036023836"
]
},
"source": "https://gitlab.freedesktop.org/mesa/mesa@02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"target": {
"file": "src/mesa/drivers/x11/xm_buffer.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-5068-35a78ea4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"86152022769647049473691255526554010388",
"101868295578463993546910883248190435361",
"228878768313779073891326267432736084300",
"134544723262417494627852244077955446339"
]
},
"source": "https://gitlab.freedesktop.org/mesa/mesa@02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"target": {
"file": "src/gallium/winsys/sw/xlib/xlib_sw_winsys.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-5068-35c5eb8e",
"digest": {
"length": 351,
"function_hash": "290279759643506509008372020186169818897"
},
"source": "https://gitlab.freedesktop.org/mesa/mesa@02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"target": {
"file": "src/gallium/winsys/sw/dri/dri_sw_winsys.c",
"function": "alloc_shm"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-5068-67891280",
"digest": {
"length": 2838,
"function_hash": "316994832581475439660373376115781375927"
},
"source": "https://gitlab.freedesktop.org/mesa/mesa@02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"target": {
"file": "src/mesa/drivers/x11/xm_buffer.c",
"function": "alloc_back_shm_ximage"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-5068-f896eccb",
"digest": {
"length": 547,
"function_hash": "212862945932981495206777118466091392205"
},
"source": "https://gitlab.freedesktop.org/mesa/mesa@02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"target": {
"file": "src/gallium/winsys/sw/xlib/xlib_sw_winsys.c",
"function": "alloc_shm"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:57:22Z"
}
}
],
"modified": "2026-10-20T13:57:22.067901132Z",
"provider": "osv",
"references": [
"https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html",
"https://usn.ubuntu.com/4271-1/",
"https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc",
"https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html",
"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-5068",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388449,
"published_at": "2019-11-05T22:15:14.017+00:00"
}