The vulnerability of the PMRWritePMPageList() function in the PowerVR GPU graphics driver for Android and ChromeOS systems allows attackers to exploit their privileges.

The vulnerability of the PMRWritePMPageList function in the PowerVR GPU driver for Android and ChromeOS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the DevmemIntMapPMR() function in the PowerVR GPU driver for Android and ChromeOS allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the DevmemIntMapPMR function in the PowerVR GPU driver for Android and ChromeOS operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code and gain elevated privileges...

Stable Channel Update for ChromeOS / ChromeOS Flex

Hello All, The Stable channel is being updated to 120.0.6099.203 Platform version: 15662.64.0 for most ChromeOS devices and will be rolled out over the next few days. If you find new issues, please let us know one of the following ways: File a bug Visit our Chrome OS communities General: Chromebo...

PT-2023-8470 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified ChromeOS affected versions not specified Description: The issue is related to a use after free in the RGXBackingZSBuffer function of the PowerVR GPU driver, which could lead to arbitrary code execution...

PT-2023-8469 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver affected versions not specified Description: The issue is related to a use after free in the RGXUnbackingZSBuffer function of the PowerVR GPU driver, which could lead to arbitrary code execution. This might result in local...

PT-2023-8471 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver affected versions not specified Description: The issue is related to a use after free in the PMR ReadBytes function of the PowerVR GPU driver, which could lead to arbitrary code execution. This might result in local...

PT-2023-8472 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: devicemem server.c affected versions not specified Description: The issue is related to a use after free in the DevmemIntMapPMR function of devicemem server.c, which could lead to arbitrary code execution. This might result in local escalatio...

PT-2023-8466 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver versions affected versions not specified Description: The issue is related to the MMU UnmapPages function of the PowerVR GPU driver in Android and ChromeOS, which is vulnerable to a buffer overflow in memory. This could all...

PT-2023-8468 · Unknown · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver versions affected versions not specified Description: The issue is related to a buffer overflow in the PowerVR GPU driver, specifically in the PMR ReadBytes function for Android and ChromeOS, and an out of bounds write in t...

PT-2023-8464 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver versions affected versions not specified Description: The issue is related to a race condition in the DevmemIntAcquireRemoteCtx function of the PowerVR GPU driver, which can lead to arbitrary code execution and local...

PT-2023-8467 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver versions affected versions not specified Description: The issue is related to the PMRChangeSparseMemOSMem function of the PowerVR GPU driver in Android and ChromeOS, which is vulnerable to a buffer overflow in memory. This...

PT-2023-8465 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: The issue is related to a possible out of bounds write due to an integer overflow in the PMRWritePMPageList function of the PowerVR GPU driver in Android and ChromeOS operating systems. This...

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

UBUNTU-CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...

PT-2023-8651 · Google · Chrome Os

Name of the Vulnerable Software and Affected Versions: ChromeOS affected versions not specified Description: The issue is related to a driver for the PowerVR graphics processor in ChromeOS, involving the use of memory after it has been freed. This could allow an attacker to execute arbitrary code...

PT-2023-8652 · Google · Chrome Os

Name of the Vulnerable Software and Affected Versions: ChromeOS affected versions not specified Description: The issue is related to an integer overflow in the DevmemIntChangeSparse function of the PowerVR graphics driver in ChromeOS, which can be exploited to execute arbitrary code and elevate...

CVE-2021-0948

CVE-2021-0948 affects the PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver. The issue allows returning uninitialized kernel memory to user space, meaning the contents of that memory could disclose sensitive information. Supported by multiple connected sources (NVD/Red Hat/CVE ecosy...