← CVE Intelligence

CVE-2024-43701

GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices PUBLISHED

Description (CNA)

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.

Affected (CNA)

Vendor / productVersions
Imagination Technologies / Graphics DDKaffected 1.17 through 24.2 RTM1; unaffected 24.2 RTM2

CWE

CWE-416, CWE-362

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.