CVE-2023-45913: MESA3D Mesa

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.

Affected products

• MESA3D Mesa: version 23.0.4 only

Published 2024-03-27. Last modified 2026-06-17.