CVE-2025-20789

In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117741; Issue ID: MSV-4538...

CVE-2025-8045 Mali GPU Kernel Driver allows improper GPU processing operations

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from...

CVE-2025-58407

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...

CVE-2025-58410

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...

CVE-2025-58410 GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...

CVE-2025-52910

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation...

CVE-2025-52910

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation...

PT-2025-45046

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor and Wearable Processor Exynos 1280 Samsung Mobile Processor and Wearable Processor Exynos 2200 Samsung Mobile Processor and Wearable Processor Exynos 1330 Samsung Mobile Processor and Wearable Processor Exynos 1380...

Vulnerability of components such as drivers, GPU, DRM, AMD, and Display in the Linux operating system, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of components such as drivers, GPU, DRM, AMD, and Display in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of AMD’s microprogramming software for graphics processors allows attackers to exploit their privileges.

The vulnerability of the SMM microprogramming system software for AMD graphics processors is related to insufficient control over the flow of execution in AmdCpmOemSmm. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2022-31618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can dereference a null pointer, which may lead to denial of...

Linux Distros Unpatched Vulnerability : CVE-2011-1302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2024-36342

Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution...

CVE-2024-36346

Improper input validation in AMD Power Management Firmware PMFW could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition...

UBUNTU-CVE-2025-38705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerprofilemode for the CUSTOM profile will result in a null pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2017-6272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated an...

The vulnerability in the ASP component of AMD’s microprogramming graphics processors is related to key management errors, allowing attackers to escalate their privileges.

The vulnerability in the ASP component of AMD’s graphics processor software is related to key management errors. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability in the ASP component of AMD’s graphics processor software arises from incomplete cleanup of temporary or auxiliary resources, allowing an attacker to gain access to confidential information.

The vulnerability in the ASP microprogramming system for AMD graphics processors is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability in the SMM component of AMD’s graphics processor software relates to synchronization errors when using shared resources, allowing attackers to escalate their privileges.

The vulnerability in the SMM component of AMD’s graphics processor software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

A vulnerability in the firmware of AMD graphics processors’ microprogramming system, related to the execution of operations outside the buffer in memory, allows attackers to access confidential information.

The vulnerability in the firmware of AMD graphics processors’ microprogramming system relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...