Skip to content
OpenAdvisories
High · 7.8 CVE-2024-46971 EUVD-2024-42188GHSA-3gr3-rr4m-976p

GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems

Published Dec 13, 2024 · Updated Dec 16, 2024 · Assigned by imaginationtech

Description

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.13 RTM – ≤ 24.2 RTM1 24.2 RTM2

References