Description (CNA)
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Imagination Technologies / Graphics DDK | unaffected 25.1 RTM2; affected 25.2 RTM1 |
CWE
CWE-367
References
ADP enrichment
No English description supplied.
No references supplied.