Skip to content
OpenAdvisories
High · 7.8 CVE-2024-43701 EUVD-2024-40435GHSA-wxp4-9485-gpcm

GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices

Published Oct 14, 2024 · Updated Oct 15, 2024 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.17 – ≤ 24.2 RTM1 24.2 RTM2

Advisories 2

References