ARM Mali GPU Kernel Driver r44p0 Improper Memory Access (CVE-2023-34970)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r44p1 or r45p0 running on Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non-privileged user can make improper GPU processing operations to access a...

ARM Mali GPU Kernel Driver < r43p0 Improper Memory Access (CVE-2023-4211)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r43p0 running on Midgard, Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non- privileged user can make improper GPU memory processing...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

ARM Mali GPU Kernel Driver < r44p1 Improper Memory Access (CVE-2023-33200)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r44p1 or r45p0 running on Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non-privileged user can make improper GPU processing operations to...

CVE-2023-4211

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

CVE-2023-4211

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

Design/Logic Flaw

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

CVE-2023-4211

CVE-2023-4211 affects the Arm Mali GPU Kernel Driver. The issue is a use-after-free/resource management error in the Mali driver that allows a local, non-privileged user to perform improper GPU memory processing and access freed memory. Impact is limited to confidentiality (high impact) with no d...

CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

CVE-2023-41911

Samsung Mobile Processor Exynos 2200 allows a GPU Double Free issue 1 of 2...

Double free

Samsung Mobile Processor Exynos 2200 allows a GPU Double Free issue 1 of 2...

CVE-2023-41911

Samsung Mobile Processor Exynos 2200 allows a GPU Double Free issue 1 of 2...

CVE-2023-41911

Samsung Mobile Processor Exynos 2200 allows a GPU Double Free issue 1 of 2...

PT-2023-28163 · Samsung · Exynos 2200

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 2200 affected versions not specified Description: The issue is related to a GPU Double Free in the Samsung Mobile Processor Exynos 2200. No information is provided about the estimated number of potentially...

CVE-2023-41911

CVE-2023-41911 affects Samsung Mobile Processor Exynos 2200, describing a GPU Double Free vulnerability in the GPU resource management path. Public descriptions indicate a double release/double-free scenario as the underlying issue, with reports across multiple feeds (e.g., CNNVD and Red Hat clai...

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

Design/Logic Flaw

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data

A novel side-channel attack called GPU.zip renders virtually all modern graphics processing units GPU vulnerable to information leakage. "This channel exploits an optimization that is data dependent, software transparent, and present in nearly all modern GPUs: graphical data compression," a group...

Imagination Security Breach

Imagination is a chip from Imagination. A security vulnerability exists in Imagination 2018 and prior versions, which stems from a software-transparent compression provided by PVRIC on GPU devices, which can be exploited for cross-origin pixel stealing attacks against feTurbulence and feBlend in...