In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.
10.0.0-1ubuntu210.0.0-1ubuntu310.0.0-1ubuntu410.0.1-1ubuntu210.1.0-1ubuntu110.1.0-4ubuntu110.1.0-4ubuntu210.1.0-4ubuntu410.1.0-4ubuntu510.1.0~rc1-1ubuntu1+14 more11.0.2-1ubuntu411.0.4-1ubuntu111.0.5-1ubuntu111.0.5-1ubuntu211.0.6-1ubuntu111.0.7-1ubuntu111.0.8-1ubuntu111.1.1-1ubuntu211.1.2-1ubuntu111.1.2-1ubuntu2+11 more17.2.2-0ubuntu117.2.4-0ubuntu217.3.3-0ubuntu118.0.0~rc4-1ubuntu318.0.0~rc5-1ubuntu118.0.5-0ubuntu0~18.04.118.2.2-0ubuntu1~18.04.118.2.2-0ubuntu1~18.04.218.2.8-0ubuntu0~18.04.219.0.2-1ubuntu1.1~18.04.1+9 more19.2.1-1ubuntu119.2.4-1ubuntu119.3.3-1ubuntu120.0.0-1ubuntu120.0.2-1ubuntu120.0.4-1ubuntu120.0.4-2ubuntu120.0.8-0ubuntu1~20.04.120.2.6-0ubuntu0.20.04.121.0.3-0ubuntu0.2~20.04.1+7 more21.2.2-1ubuntu121.3.5-1ubuntu122.0.0-0ubuntu222.0.1-1ubuntu122.0.1-1ubuntu222.0.1-1ubuntu2.122.0.5-0ubuntu0.122.0.5-0ubuntu0.322.2.5-0ubuntu0.1~22.04.122.2.5-0ubuntu0.1~22.04.2+4 more23.2.1-1ubuntu323.2.1-1ubuntu423.3.0-2ubuntu323.3.3-1ubuntu224.0.1-1ubuntu124.0.3-1ubuntu324.0.3-1ubuntu424.0.5-1ubuntu124.0.9-0ubuntu0.124.0.9-0ubuntu0.2+5 more25.0.3-1ubuntu225.0.7-0ubuntu125.0.7-0ubuntu225.0.7-0ubuntu325.1.5-1ubuntu125.1.7-1ubuntu125.2.1-2ubuntu125.2.2-1ubuntu125.2.3-1ubuntu125.2.8-0ubuntu0.25.10.1Exploitability
AV:NAC:HPR:NUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H