CVE-2015-5198

High

Published: 08/09/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.

Risk Assessment

This vulnerability may lead to privilege escalation by local users, posing a serious security threat to the system.

Recommendation

It is recommended to update libvdpau to version 1.1.1 or later and review the configuration of setuid and setgid applications to mitigate risk.

Other vulnerabilities in libvdpau

CVE-2015-5199High
Directory traversal vulnerability in dlopen in libvdpau before version 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.

Original NVD description (English source)

libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.