High · 7.8 CVE-2024-43705 EUVD-2024-40408GHSA-rrq7-ch89-92vr

GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)

Published Dec 28, 2024 · Updated Dec 28, 2024 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory.

Affected products

Vendor	Product	Affected	Fixed
Imagination Technologies	Graphics DDK	1.13 RTM – ≤ 24.2 RTM2	24.3 RTM

Advisories 2

NCSC-2025-0039 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Feb 4, 2025
WID-SEC-2025-0251 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 3, 2025

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

EUVD	v3.1	7.8
CISA-ADP	v3.1	7.8