CVE-2023-44216

🗓️ 26 Sep 2023 00:00:00Reported by mitreType

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in SVG Filter specification

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2023-44216	27 Sep 202315:19	–	attackerkb
CNNVD	Imagination Security Breach	27 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-44216	26 Sep 202300:00	–	cvelist
EUVD	EUVD-2023-48575	3 Oct 202520:07	–	euvd
NVD	CVE-2023-44216	27 Sep 202315:19	–	nvd
OSV	UBUNTU-CVE-2023-44216	27 Sep 202315:19	–	osv
Prion	Design/Logic Flaw	27 Sep 202315:19	–	prion
Positive Technologies	PT-2023-29149 · Imagination Technologies · Imagination Gpu	26 Sep 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-44216	23 May 202505:36	–	redhatcve
UbuntuCve	CVE-2023-44216	27 Sep 202300:00	–	ubuntucve

NVD

Vulnrichment

Node

canonical ubuntu_linuxMatch22.04lts

AND

amd ryzen_7_4800uMatch-

intel core_i7-10510uMatch-

intel core_i7-12700kMatch-

intel core_i7-8700Match-

Node

microsoft windows_11Match-professional

AND

intel core_i7-10610uMatch-

Node

microsoft windows_11Match-home

AND

intel core_i7-11800hMatch-

nvidia geforce_rtx_3060Match-

Node

microsoft windows_10Match-pro

AND

amd ryzen_5_7600xMatch-

nvidia geforce_rtx_2080_superMatch-

Node

apple macosMatch13.1

AND

apple m1_mac_miniMatch-

Node

google androidMatch13.0

AND

google pixel_6Match-

Source	Link
arstechnica	www.arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/
blog	www.blog.imaginationtech.com/reducing-bandwidth-pvric/
hertzbleed	www.hertzbleed.com/gpu.zip/GPU-zip.pdf
bleepingcomputer	www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/
blog	www.blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/
github	www.github.com/UT-Security/gpu-zip
news	www.news.ycombinator.com/item
hertzbleed	www.hertzbleed.com/gpu.zip/
w3	www.w3.org/TR/filter-effects-1/

21 Nov 2024 08:25Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3

EPSS0.00494

SSVC

CWE-203