Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-47893 EUVD-2025-15561GHSA-wxm4-3j5f-3j3v

GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)

Published May 17, 2025 · Updated May 19, 2025 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualised GPU memory.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.15 RTM – ≤ 24.3 RTM 25.1 RTM

Advisories 2

References