Lucene search
K

9762 matches found

NVD
NVD
added 2024/11/30 3:15 a.m.15 views

CVE-2024-43702

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page...

8.1CVSS0.0033EPSS
Exploits0References1
CVE
CVE
added 2024/11/30 2:39 a.m.100 views

CVE-2024-43703

CVE-2024-43703 affects Imagination Technologies PowerVR-GPU (DDK driver). The underlying issue is a logic error where duplicate calls to RGXCreateFreeList on the same reservation can cause a use-after-free in GPU memory management, enabling improper GPU calls that could read/write GPU physical me...

8.1CVSS6.3AI score0.00379EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/30 2:39 a.m.18 views

CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

6.7AI score0.00379EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/30 2:39 a.m.26 views

CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...

0.00379EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/30 2:30 a.m.22 views

CVE-2024-43702 GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page...

0.0033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/30 2:30 a.m.11 views

CVE-2024-43702 GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page...

6.8AI score0.0033EPSS
Exploits0References1
CVE
CVE
added 2024/11/30 2:30 a.m.101 views

CVE-2024-43702

CVE-2024-43702: Imagination Technologies PowerVR-GPU driver is affected. A non-privileged user can trigger improper GPU system calls, leading to unprivileged access to arbitrary physical memory pages. Several sources describe this vulnerability as enabling kernel memory writes via GPU render stat...

8.1CVSS6.5AI score0.0033EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/30 12:0 a.m.2 views

PT-2024-30629 · Imagination Technologies +1 · Graphics Ddk +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, enabling unauthorized reads and writes of physical memory from the GPU hardware...

8.1CVSS5.9AI score0.00379EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/11/30 12:0 a.m.3 views

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user may make improper GPU system calls, which could allow unauthorized access to arbitrary physical memory...

8.1CVSS6.3AI score0.0033EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:0 a.m.3 views

The vulnerability of the Apple GPU Driver affects browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing an attacker to execute arbitrary code.

The vulnerability of the Apple GPU Driver in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.00704EPSS
Exploits0References13Affected Software4
SUSE CVE
SUSE CVE
added 2024/11/27 4:5 a.m.1 views

SUSE CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

8.2CVSS6.6AI score0.00704EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2024/11/26 10:23 p.m.7 views

CVE-2024-11691

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be avoided by working around the flaw. Note: This issue only affected macOS operating systems. Other...

8.2CVSS6.5AI score0.00704EPSS
Exploits0References10
NVD
NVD
added 2024/11/26 2:15 p.m.10 views

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

8.8CVSS0.00704EPSS
Exploits0References8
CVE
CVE
added 2024/11/26 1:33 p.m.318 views

CVE-2024-11691

CVE-2024-11691: A memory corruption/out-of-bounds write flaw in Apple GPU drivers via WebGL on Apple Silicon M-series. Affected products include Firefox and Thunderbird releases listed in MFSA advisories: Firefox <133 and ESR <128.5; Thunderbird <133 and ESR

8.8CVSS8AI score0.00704EPSS
Exploits0References8Affected Software2
Cvelist
Cvelist
added 2024/11/26 1:33 p.m.28 views

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

0.00704EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/11/26 1:33 p.m.42 views

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

8.1AI score0.00704EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2024/11/26 1:33 p.m.10 views

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

8.8CVSS8.6AI score0.00704EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/11/26 1:33 p.m.23 views

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

8.8CVSS8.2AI score0.00704EPSS
Exploits0
Kaspersky
Kaspersky
added 2024/11/26 12:0 a.m.15 views

KLA77555 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability in Enhanced Tracking Protection’s Strict mode can be...

8.8CVSS8.2AI score0.00704EPSS
Exploits0References3
Mozilla
Mozilla
added 2024/11/26 12:0 a.m.15 views

Security Vulnerabilities fixed in Firefox ESR 115.18 — Mozilla

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. Enhanced Tracking Protection's Strict...

8.8CVSS6.2AI score0.00704EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder