CVE-2021-0873

In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0945

In PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-0948: Use of Uninitialized Resource

The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information...

CVE-2021-0945

In PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Integer overflow

In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

PT-2023-12017 · Imagination Technologies · Powervr Kernel Driver

Name of the Vulnerable Software and Affected Versions: PowerVR kernel driver affected versions not specified Description: The issue is related to a missing size check in the PVRSRVBridgeSyncPrimOpCreate function of the PowerVR kernel driver, which could lead to an integer overflow and out-of-boun...

CVE-2021-0701: Integer Overflow or Wraparound

In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

PT-2023-12032 · Imagination Technologies · Powervr Kernel Driver

Name of the Vulnerable Software and Affected Versions: PowerVR kernel driver affected versions not specified Description: The issue is related to a missing bounds check in the PMRCreate function of the PowerVR kernel driver. This allows for the overwrite of heap memory via PhysmemNewRamBackedPMR,...

Google Android Input Validation Error Vulnerability (CNVD-2023-43881)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an input validation error vulnerability that originates in the PowerVRSRVBridgePhysmemImportSparseDmaBuf component of the PowerVR kernel driver component where the lack of size checking means tha...

Google Android elevation of privilege vulnerability (CNVD-2023-50311)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an integer overflow in the PowerVRSRVBridgeRGXKickSync of the PowerVR kernel driver, which can be exploited by an attacker to escalate privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-50310)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an integer overflow in the PowerVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, which can be exploited by an attacker to escalate privileges...

CVE-2021-0874

In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i...

Integer overflow

In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Integer overflow

In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i...

Integer overflow

In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2023-12031

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue is related to a missing size check in the PowerVR kernel driver, specifically in the PVRSRVBridgeSyncPrimOpTake function. This could lead to an integer overflow,...

CVE-2021-0881

In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2023-12027 · Imagination Technologies +1 · Powervr +1

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: A missing size check in the PowerVR kernel driver's PVRSRVBridgeRGXKickCDM component could lead to an integer overflow, allowing out-of-bounds heap access. This issue could...

PT-2023-12025 · Imagination Technologies +1 · Powervr +1

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: A missing size check in the PowerVR kernel driver's PVRSRVBridgeRGXTDMSubmitTransfer function can cause an integer overflow, potentially leading to out-of-bounds heap access...