Skip to content
OpenAdvisories

Vendor

Imagination Technologies

98 known vulnerabilities.

Products

98 results · Feed

  • High 7.8

    GPU DDK - Exploitable double free on PTL_STREAM_DESC object in the kernel function TLServerCloseStreamKM due to a race condition

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

  • High 7.8

    GPU DDK - Arbitrary write of read-only dmabuf

    Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers.

  • High 7.8

    GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write

    Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write of data outside the Guest's virtualised GPU memory.

  • Medium 6.7

    GPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore

    Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.

  • Medium 4.4

    GPU DDK - rgxfw_hwperf_config OOB read & write

    Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data outside the Guest's virtualised GPU memory.

  • Medium 4.1

    GPU DDK - psContext->eDM gives OOB write

    Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.

  • High 7.1

    GPU DDK - OOB read into fwlog due to unchecked block count

    Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.

  • High 7.1

    GPU DDK - Out of bounds read into fwlog due to unchecked loop bounds

    Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.

  • High 8.8

    GPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write

    Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instability and reboots.

  • High 7.8

    GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)

    Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory.

  • High 7.8

    Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

  • High 7.8

    GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

  • High 7.8

    GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  • High 7.8

    GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

  • High 8.1

    GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

    Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.

  • High 8.1

    GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages

    Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.

  • High 8.4

    GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused

    Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.

  • High 7.8

    GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices

    Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.