Khronos Group vulnerabilities
3 vulnerabilities
Known vulnerabilities in Khronos Group products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Glslang1 vulnerabilities
- Nnef1 vulnerabilities
- Nnef Tools1 vulnerabilities
- Opencl1 vulnerabilities
- Vulkan1 vulnerabilities
CVE-2026-110657khronos groupnnef+1
EPSS score0.24%
Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or overwrite '.dat' files when users convert, save, or generate weights.CVE-2025-3010debianglslang+2EPSS score0.19%
A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of the file glslang/MachineIndependent/Intermediate.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.CVE-2023-4969amdathlon_3000g_firmware+135EPSS score1.19%
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.