CVE-2024-43702

CVE-2024-43702: Imagination Technologies PowerVR-GPU driver is affected. A non-privileged user can trigger improper GPU system calls, leading to unprivileged access to arbitrary physical memory pages. Several sources describe this vulnerability as enabling kernel memory writes via GPU render stat...

PT-2024-30629 · Imagination Technologies +1 · Graphics Ddk +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, enabling unauthorized reads and writes of physical memory from the GPU hardware...

VulnCheck KEV: CVE-2021-41285

Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call mapping...

CVE-2024-47027

In smmemcompatgetvmmobj of lib/sm/sharedmem.c, there is a possible arbitrary physical memory access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47027

In smmemcompatgetvmmobj of lib/sm/sharedmem.c, there is a possible arbitrary physical memory access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43701 GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

Unspecified vulnerability in Linux kernel (CNVD-2024-39468)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a corrupted physical memory information segment in the s390/boot component. No details of the vulnerability...

CVE-2024-45014

In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid possible physmeminfo segment corruption When physical memory for the kernel image is allocated it does not consider extra memory required for offsetting the image start to match it with the lower 20 bits of KASLR...

CVE-2024-45014 s390/boot: Avoid possible physmem_info segment corruption

In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid possible physmeminfo segment corruption When physical memory for the kernel image is allocated it does not consider extra memory required for offsetting the image start to match it with the lower 20 bits of KASLR...

Exploit for Out-of-bounds Write in Lenovo Diagnostics

CVE-2022-3699 Proof of Concept exploit for CVE-2022-3699 Expl...

CVE-2024-44067

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...

CVE-2024-44067

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite...

CVE-2024-44067

CVE-2024-44067 affects the T-Head XuanTie C910 (TH1520 SoC) and XuanTie C920 (SOPHON SG2042); an instruction in these CPUs allows unprivileged attackers to write to arbitrary physical memory (GhostWrite). Reported impact is high for confidentiality, integrity, and availability (CVSSv3.1: 8.4, Loc...

T-Head XuanTie C910和C920 安全漏洞

The T-Head XuanTie C910 and T-Head XuanTie C920 are both high-efficiency CPU processors from China-based T-Head. A security vulnerability exists in the T-Head XuanTie C910 and C920 that stems from an instruction that allows an unprivileged attacker to write to an arbitrary physical memory locatio...

CVE-2024-38543

In the Linux kernel, the following vulnerability has been resolved: lib/testhmm.c: handle srcpfns and dstpfns allocation failure The kcalloc in dmirrordeviceevictchunk will return null if the physical memory has run out. As a result, if srcpfns or dstpfns is dereferenced, the null pointer...

CVE-2024-36055

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory with read/write access via the MmMapIoSpace API IOCTL 0x9c40a4f8, 0x9c40a4e8, 0x9c40a4c0, 0x9c40a4c4, 0x9c40a4ec, and seven others, leading to a denial of service BSOD...

CVE-2024-36056

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLockedPages, leading to NT AUTHORITY\SYSTEM privilege escalation...

CVE-2024-36056

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLockedPages, leading to NT AUTHORITY\SYSTEM privilege escalation...

CVE-2024-36055

The CVE-2024-36055 issue affects Marvin Test HW.exe (Marvin Test Solutions) prior to version 5.0.5.0. The vulnerability allows unprivileged user‑mode processes to arbitrarily map physical memory with read/write access via MmMapIoSpace, triggered by IOCTLs such as 0x9c40a4f8, 0x9c40a4e8, 0x9c40a4c...

CVE-2024-36055

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory with read/write access via the MmMapIoSpace API IOCTL 0x9c40a4f8, 0x9c40a4e8, 0x9c40a4c0, 0x9c40a4c4, 0x9c40a4ec, and seven others, leading to a denial of service BSOD...