670 matches found
CVE-2018-17479
Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
USN-3904-1 nvidia-graphics-drivers-390 vulnerability
It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the application data processed on the GPU...
Apple IntelHD5000 Graphics Process Token Privilege Escalation Vulnerability
Summary A memory corruption vulnerability exists in the IntelHD5000 kernel extension when dealing with graphics resources inside of OSX 10.13.4. A library inserted into the VLC media application can cause an out-of-bounds access inside of the KEXT leading to a use after free and invalid memory...
chromium-browser: Memory corruption in GPU Internals
A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
Huawei Mate 9 Pro GPU Driver Arbitrary Memory Release Vulnerability
The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. An arbitrary memory release security vulnerability exists in the GPU driver of the Huawei Mate 9 Pro phone due to insufficient validation of parameter legitimacy by the memory management module. An attacker can...
PT-2020-5329 · Gnome +7 · Librsvg +7
Name of the Vulnerable Software and Affected Versions: librsvg versions prior to 2.46.2 Description: The issue is related to a denial of service caused by a crafted SVG file with nested patterns. This file, when processed by the library, can lead to an exponential growth in the number of final...
Huawei P7 and P8 Youth Edition GPU Driver Denial of Service Vulnerability
Huawei P7 and P8 Youth Edition are smartphone devices from Huawei, a Chinese company.GPU driver is one of the graphics drivers. A denial of service vulnerability exists in the GPU driver in the Huawei P7 and P8 Youth Edition. An attacker can exploit this vulnerability by tricking a user into...
UBUNTU-CVE-2017-0352
All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges...
The vulnerability of the Samsung operating system allows attackers to compromise information security.
The vulnerability of the kbasedispatch function file arm/t7xx/r5p0/malikbasecorelinux.c of the Samsung Mobile GPU operating system is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker to compromise security measures...
UBUNTU-CVE-2016-10214
Memory leak in the virglresourceattachbacking function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service memory consumption via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the NVIDIA GPU operating system for Android is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute an application with privileges of the current user...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the NVIDIA GPU operating system for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability related to privilege escalation in the NVIDIA GPU operating system for Android is linked to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability related to privilege escalation in the NVIDIA GPU operating system for Android is linked to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code of a local malware application within the kernel context. This issue is...
CVE-2016-8428
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...
DEBIAN-CVE-2016-9845
QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...
QEMU 'virtio-gpu-3d.c' Denial of Service Vulnerability
QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU's 'virtio-gpu-3d.c' file has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...
Qualcomm Adreno GPU MSM Driver Query Heap Overflow Vulnerability
A heap overflow vulnerability exists in the Qualcomm Adreno GPU MSM Driver, which can be exploited by an attacker to execute arbitrary code in the context of an application, which could also result in a denial of service...
Linux video memory DOS with Intel drivers — Mozilla
Security researcher Ucha Gobejishvili reported a denial of service DOS attack when doing certain WebGL operations in a canvas requiring an unusually large amount buffer to be allocated from video memory. This resulted in memory resource exhaustion with some Intel video cards, requiring the comput...
chromium-browser: Use-after-free related to unexpected GPU process termination in unspecified
Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown,...