Skip to content
OpenAdvisories
Low ALAS2023-2026-1707 1 CVE

Low: glslang security update (Amazon Linux 2023)

Published May 25, 2026 · Updated May 25, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-3010: A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of the file glslang/MachineIndependent/Intermediate.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 glslang 0:15.0.0-88.amzn2023
Amazon Linux · 2023 glslang-debuginfo 0:15.0.0-88.amzn2023
Amazon Linux · 2023 glslang-debugsource 0:15.0.0-88.amzn2023
Amazon Linux · 2023 glslang-devel 0:15.0.0-88.amzn2023

Vulnerabilities 1

  • Low 3.3
    CVE-2025-3010

    Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference

    A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermediate::isConversionAllowed of the file glslang/MachineIndependent/Intermediate.cpp. The manipulation …

    Khronos Group glslang glslang glslang Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-3010.html