Medium · 6.7 CVE-2024-52937 EUVD-2024-46164GHSA-mhhc-7vg8-h992

GPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore

Published Jan 13, 2025 · Updated Jan 13, 2025 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.

Affected products

Vendor	Product	Affected	Fixed
Imagination Technologies	Graphics DDK	23.2 RTM2 – ≤ 24.2 RTM2	24.3 RTM

Advisories 1

WID-SEC-2025-0723 Android Patchday April 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 1, 2026

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/