CVE-2024-47896

creationtimestamp| type| source ---|---|--- 2025-02-22 15:20:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5029 2025-02-22 17:56:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lirvei2x4m2t 2025-02-22 19:10:22+00:00| seen| https://t.me/cvedetector/18731 2025-03-06...

CVE-2024-47896 GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2024-47896 GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2024-47896

The GPU Driver Development Kit (DDK) is vulnerable to an out-of-bounds write in the rgxfw_hwr_log_info() function within rgxfw_hwr.c. The root cause is an incorrect bounds check when processing the psHWRInfoBuf parameter, specifically via psHWRInfoBuf->ui32WriteIndex. An attacker can exploit t...