VirtualBox's 3D acceleration forwards guest graphics commands to the host. The legacy path used a Chromium-based protocol, and newer versions use the VMSVGA adapter. Either way the host-side code parses guest-submitted commands and buffers, and flaws there corrupt host memory. The feature requires Guest Additions and 3D acceleration to be enabled.
3D escape surface:
- The Chromium guest-to-host graphics protocol (legacy)
- VMSVGA command and surface handling
Exploitation notes#
- Reachability requires 3D acceleration and Guest Additions, which are off by default but common in lab and desktop VMs.
- The graphics command protocol is large and has produced multiple escapes.
- Code execution lands in the host VM process, then escalates.