Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-as99-e7pb-eqcw
Vulnerability ID VCID-as99-e7pb-eqcw
Aliases CVE-2012-5129
Summary Multiple vulnerabilities in Mesa could result in execution of arbitrary code or Denial of Service.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-122 Heap-based Buffer Overflow
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
epss 0.00443 https://api.first.org/data/v1/epss?cve=CVE-2012-5129
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2012-5129
Reference id Reference type URL
http://googlechromereleases.blogspot.com/2012/11/stable-update-for-chrome-os_30.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5129.json
https://api.first.org/data/v1/epss?cve=CVE-2012-5129
https://code.google.com/p/chromium/issues/detail?id=145525
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5129
http://www.ubuntu.com/usn/USN-1818-1
695248 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695248
883243 https://bugzilla.redhat.com/show_bug.cgi?id=883243
cpe:2.3:o:google:chrome:23.0.1271.91:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:google:chrome:23.0.1271.91:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome:23.0.1271.92:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:google:chrome:23.0.1271.92:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
CVE-2012-5129 https://nvd.nist.gov/vuln/detail/CVE-2012-5129
GLSA-201404-06 https://security.gentoo.org/glsa/201404-06
USN-1818-1 https://usn.ubuntu.com/1818-1/
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2012-5129
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.63261
EPSS Score 0.00443
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:03.357272+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201404-06 38.0.0