AMD Graphics Driver Data Forgery Issue Vulnerability

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges to...

AMD Graphics Driver Data Forgery Issue Vulnerability

AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges t...

PT-2023-7302 · Amd · Radeon Rx Vega M Graphics Driver

Name of the Vulnerable Software and Affected Versions: RadeonTM RX Vega M Graphics driver for Windows affected versions not specified Description: The issue is related to improper signature verification of the RadeonTM RX Vega M Graphics driver for Windows. This may allow an attacker with admin...

AMD Graphics Driver Vulnerabilities – November 2023

Bulletin ID: AMD-SB-6003 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD received reports of vulnerabilities potentially affecting some AMD Graphics products. Refer to the CVE Details section for information about each CVE. CVE...

kernel: drm/i915: Fix request ref counting during error capture & debugfs dump

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error capture, the reference counting around the request object was broken. Fix it up. The context based search manages the...

kernel: Linux kernel: Denial of Service due to PCI device reference count leak

A flaw was found in the Linux kernel. A local low-privileged user could exploit a reference count leak in the drm/amdgpu component. This vulnerability, related to how PCI Peripheral Component Interconnect devices are managed, could lead to a Denial of Service DoS by exhausting system resources...

kernel: drm/i915/gvt: fix vgpu debugfs clean in remove

A NULL pointer dereference was found in the Linux kernel Intel i915 graphics driver's virtual GPU debugfs cleanup handling. A local user with privileges to unbind the i915 driver can trigger driver removal on systems with active virtual GPU instances, causing the cleanup path to attempt removing...

kernel: drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()

A memory leak vulnerability was found in the VMware graphics driver vmwgfx in the Linux kernel. In vmwmksstataddioctl, when copying the description string from userspace fails with -EFAULT, the allocated page for the instance descriptor is not freed. This leads to memory leakage that can cause...

ARM Mali GPU Driver Buffer Error Vulnerability

ARM Mali GPU Driver is a driver from ARM UK for Mali GPU support. A security vulnerability exists in ARM Mali GPU Driver versions r38p0 through r44p0. An attacker can exploit the vulnerability to perform incorrect GPU memory handling operations...

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

...

NVIDIA GPU Display Driver Security Vulnerability

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from the use of re-parsing to write arbitrary data to a privileged...

CVE-2023-20598

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...

Input validation

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...

CVE-2023-20598

The CVE concerns the AMD Radeon graphics driver where improper privilege management (insufficient access control) in IOCTL handling could allow an authenticated attacker to craft IOCTLs to access arbitrary hardware ports or physical addresses, potentially enabling arbitrary code execution. The is...

CVE-2023-20598

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...

AMD Radeon Security Vulnerability

AMD Radeon is a device driver and utility package for Advanced Micro Devices graphics cards and GPUs from UltraMicro Semiconductor AMD. A security vulnerability exists in the AMD Radeon Graphics driver that stems from improper privilege management and could allow an authenticated attacker to craf...

AMD Radeon™ Graphics Kernel Driver Privilege Management Vulnerability

Bulletin ID: AMD-SB-6009 Potential Impact: Arbitrary code execution Severity: High Summary A potential vulnerability was reported in the AMD Radeon™ Software Adrenalin Edition and PRO Edition kernel pdfwkrnl.sys driver which may allow arbitrary code execution. Current AMD analysis shows the attac...

PT-2023-9158 · Qualcomm · Qualcomm Embedded Platform Graphics Driver

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform graphics driver affected versions not specified Description: The issue is related to a memory corruption problem in the graphics driver when a context is destroyed with KGSL GPU AUX COMMAND TIMELINE objects queued...

Three vulnerabilities in NVIDIA graphics driver could cause memory corruption

Piotr Bania of Cisco Talos discovered the vulnerabilities mentioned in this post. Cisco Talos recently disclosed three vulnerabilities in the shader functionality of the NVIDIA D3D10 driver that works with NVIDIAs graphics cards. The driver is vulnerable to memory corruption if an adversary sends...

NVIDIA D3D10 Driver Shader Functionality dcl_resource_structured index memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1721 NVIDIA D3D10 Driver Shader Functionality dclresourcestructured index memory corruption vulnerability August 10, 2023 CVE Number CVE-2022-34671 SUMMARY A memory corruption vulnerability exists in the Shader Functionality of NVIDIA D3D10 Driver NVIDIA D3D1...