Lucene search
K

670 matches found

OSV
OSV
added 2019/06/27 5:15 p.m.2 views

CVE-2018-17479

Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.9AI score0.00895EPSS
Exploits0References2
OSV
OSV
added 2019/03/07 4:41 p.m.1 views

USN-3904-1 nvidia-graphics-drivers-390 vulnerability

It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the application data processed on the GPU...

5.5CVSS6.4AI score0.00379EPSS
Exploits0References2
Talos
Talos
added 2019/01/08 12:0 a.m.49 views

Apple IntelHD5000 Graphics Process Token Privilege Escalation Vulnerability

Summary A memory corruption vulnerability exists in the IntelHD5000 kernel extension when dealing with graphics resources inside of OSX 10.13.4. A library inserted into the VLC media application can cause an out-of-bounds access inside of the KEXT leading to a use after free and invalid memory...

9.3CVSS8AI score0.00907EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2018/10/24 10:6 p.m.4 views

chromium-browser: Memory corruption in GPU Internals

A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

7.4CVSS7.6AI score0.01547EPSS
Exploits0References5
CNVD
CNVD
added 2018/07/11 12:0 a.m.0 views

Huawei Mate 9 Pro GPU Driver Arbitrary Memory Release Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. An arbitrary memory release security vulnerability exists in the GPU driver of the Huawei Mate 9 Pro phone due to insufficient validation of parameter legitimacy by the memory management module. An attacker can...

9.3CVSS7.9AI score0.01009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/12/31 12:0 a.m.2 views

PT-2020-5329 · Gnome +7 · Librsvg +7

Name of the Vulnerable Software and Affected Versions: librsvg versions prior to 2.46.2 Description: The issue is related to a denial of service caused by a crafted SVG file with nested patterns. This file, when processed by the library, can lead to an exponential growth in the number of final...

8.8CVSS6.8AI score0.02274EPSS
Exploits0References72
CNVD
CNVD
added 2017/06/08 12:0 a.m.2 views

Huawei P7 and P8 Youth Edition GPU Driver Denial of Service Vulnerability

Huawei P7 and P8 Youth Edition are smartphone devices from Huawei, a Chinese company.GPU driver is one of the graphics drivers. A denial of service vulnerability exists in the GPU driver in the Huawei P7 and P8 Youth Edition. An attacker can exploit this vulnerability by tricking a user into...

5.5CVSS6.6AI score0.00212EPSS
Exploits0References1
OSV
OSV
added 2017/05/09 12:0 a.m.2 views

UBUNTU-CVE-2017-0352

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges...

7.8CVSS7.1AI score0.00333EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/04/03 12:0 a.m.4 views

The vulnerability of the Samsung operating system allows attackers to compromise information security.

The vulnerability of the kbasedispatch function file arm/t7xx/r5p0/malikbasecorelinux.c of the Samsung Mobile GPU operating system is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker to compromise security measures...

10CVSS8.1AI score0.02934EPSS
Exploits0References5
OSV
OSV
added 2017/03/20 4:59 p.m.0 views

UBUNTU-CVE-2016-10214

Memory leak in the virglresourceattachbacking function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service memory consumption via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands...

6.5CVSS6.7AI score0.00414EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:0 a.m.2 views

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the NVIDIA GPU operating system for Android is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute an application with privileges of the current user...

9.3CVSS7.3AI score0.01703EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:0 a.m.4 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the NVIDIA GPU operating system for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS6.2AI score0.00862EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:0 a.m.3 views

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability related to privilege escalation in the NVIDIA GPU operating system for Android is linked to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is...

9.3CVSS7.7AI score0.0179EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/01/18 12:0 a.m.2 views

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability related to privilege escalation in the NVIDIA GPU operating system for Android is linked to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code of a local malware application within the kernel context. This issue is...

9.3CVSS7.7AI score0.01524EPSS
Exploits0References2
OSV
OSV
added 2017/01/12 8:59 p.m.3 views

CVE-2016-8428

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

7.8CVSS6.1AI score
Exploits0References3
OSV
OSV
added 2016/12/29 10:59 p.m.2 views

DEBIAN-CVE-2016-9845

QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

6.5CVSS6.6AI score0.00416EPSS
Exploits0References1
CNVD
CNVD
added 2016/12/26 12:0 a.m.2 views

QEMU 'virtio-gpu-3d.c' Denial of Service Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU's 'virtio-gpu-3d.c' file has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

5.5CVSS8.8AI score0.00429EPSS
Exploits0References1
CNVD
CNVD
added 2016/09/23 12:0 a.m.1 views

Qualcomm Adreno GPU MSM Driver Query Heap Overflow Vulnerability

A heap overflow vulnerability exists in the Qualcomm Adreno GPU MSM Driver, which can be exploited by an attacker to execute arbitrary code in the context of an application, which could also result in a denial of service...

7.8AI score
Exploits0References1
Mozilla
Mozilla
added 2016/03/08 12:0 a.m.43 views

Linux video memory DOS with Intel drivers — Mozilla

Security researcher Ucha Gobejishvili reported a denial of service DOS attack when doing certain WebGL operations in a canvas requiring an unusually large amount buffer to be allocated from video memory. This resulted in memory resource exhaustion with some Intel video cards, requiring the comput...

7.1CVSS7.6AI score0.02425EPSS
Exploits0References2Affected Software2
RedHat Linux
RedHat Linux
added 2015/07/27 9:8 a.m.3 views

chromium-browser: Use-after-free related to unexpected GPU process termination in unspecified

Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown,...

7.5CVSS7.5AI score0.01617EPSS
Exploits0References5
Rows per page
Query Builder