956 matches found
CVE-2024-46973 Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...
CVE-2024-46973
CVE-2024-46973 affects Imagination Technologies PowerVR-GPU driver. The issue is a use-after-free in the kernel triggered by improper GPU system calls (reference-count mismanagement on psServerMMUContext), exploitable by a non-privileged user with local access. Impact is local privilege escalatio...
PT-2024-32310 · Imagination Technologies · Graphics Ddk
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially triggering use-after-free kernel...
Microsoft win32kbase.sys 代码问题漏洞
Microsoft win32kbase.sys is a driver from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft win32kbase.sys that stems from the win32kbase.sys driver containing an access conflict vulnerability. An attacker exploiting this vulnerability could cause a reboot via a specially...
CVE-2024-47892
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
CVE-2024-47892
CVE-2024-47892 impacts Imagination Technologies’ PowerVR-GPU driver (Imagination hardware) and is described as a use-after-free in the GPU driver memory handling. The problem is in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory, enabling a non-privileged user to perform G...
CVE-2024-47892 GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
CVE-2024-46971 GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
New Linux Rootkit PUMAKIT Uses Advanced Stealth Techniques to Evade Detection
Cybersecurity researchers have uncovered a new Linux rootkit called PUMAKIT that comes with capabilities to escalate privileges, hide files and directories, and conceal itself from system tools, while simultaneously evading detection. "PUMAKIT is a sophisticated loadable kernel module LKM rootkit...
Imagination GPU Driver 安全漏洞
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user may be able to execute GPU system calls to read and write freed physical memory from the GPU...
Imagination GPU Driver 安全漏洞
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user may be able to execute GPU system calls to read and write freed physical memory from the GPU...
PT-2024-32875 · Imagination Technologies · Graphics Ddk
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to make GPU system calls, potentially reading and writing freed physical memory from the GPU. This could lead to...
Important: python36:3.6 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
CVE-2024-43703
Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...
CVE-2024-43702
Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page...
CVE-2024-43703
CVE-2024-43703 affects Imagination Technologies PowerVR-GPU (DDK driver). The underlying issue is a logic error where duplicate calls to RGXCreateFreeList on the same reservation can cause a use-after-free in GPU memory management, enabling improper GPU calls that could read/write GPU physical me...
CVE-2024-43703 GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF
Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW...
PT-2024-30628 · Imagination Technologies +1 · Graphics Ddk +1
Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue allows software installed and run by a non-privileged user to make improper GPU system calls, enabling unprivileged access to an...
Imagination GPU Driver 安全漏洞
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user may make improper GPU system calls, which could allow unauthorized access to arbitrary physical memory...