Khronos Group vulnerabilities

Products

• glslang 1
• OpenCL 1
• Vulkan 1

Latest Khronos Group CVEs

Newest publication first

1. CVE-2025-3010 Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference

   Published 2025-03-31

   Medium·CVSS 4.8 EPSS 0.19%

   A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of the file glslang/MachineIndependent/Intermediate.cpp. The manipulation leads to null pointer...

2. CVE-2023-4969 GPU kernel implementations susceptible to memory leak

   Published 2024-01-16

   Medium·CVSS 6.5 EPSS 1.2%

   A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called local memory on various architectures.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.