Skip to content
OpenAdvisories
High · 7.8 CVE-2024-52938 EUVD-2024-46196GHSA-3vv9-8w9f-p9ff

GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write

Published Jan 13, 2025 · Updated Jan 13, 2025 · Assigned by imaginationtech

Description

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write of data outside the Guest's virtualised GPU memory.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.15 RTM – ≤ 24.2 RTM2 24.3 RTM

Advisories 1

References