CVE-2024-47898

CVE-2024-47898 is a PowerVR-GPU vulnerability reported by Imagination Technologies. The issue stems from a use-after-free condition in PVRSRVDeviceSyncOpen, caused by improper memory reuse after release, which can be triggered by software running as a non-privileged user via GPU system calls. The...

CVE-2024-47898 GPU DDK - PVRSRVDeviceSyncOpen use-after-free condition

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-47891

CVE-2024-47891 targets Imagination Technologies PowerVR-GPU components (GPU driver). Affected behavior involves software run as a non-privileged user issuing improper GPU system calls that trigger a use-after-free in kernel objects (PTL_STREAM_DESC), leading to local code-execution-like impact wi...

PT-2025-2779 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, triggering use-after-free kernel exceptions. Recommendations: At the moment, ther...

Phoenix SecureCore 代码问题漏洞

Phoenix SecureCore is a computer based input/output system from Phoenix Contact Phoenix of Germany. A code issue vulnerability exists in Phoenix SecureCore that arises from an improperly checked exception or anomaly that allows input data manipulation...

CVE-2024-25371

Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions...

PT-2025-2387 · Gramine · Gramine

Name of the Vulnerable Software and Affected Versions: Gramine versions prior to a390e33e16ed374a40de2344562a937f289be2e1 Description: The issue is related to an interface vulnerability due to mismatching software signals versus hardware exceptions. This occurs because the software signals do not...

CVE-2024-25371

Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions...

CVE-2024-25371

Gramine is affected by an Interface vulnerability caused by mismatching software signals and hardware exceptions. Affected: Gramine versions prior to the commit a390e33e16ed374a40de2344562a937f289be2e1. Root cause: SW signals do not properly align with HW exceptions. Impact: not explicitly quanti...

CVE-2024-25371

Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions...

CVE-2024-56434

UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device...

CVE-2024-56434

UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device...

CVE-2024-56434

UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device...

CVE-2024-56434

CVE-2024-56434 describes a Use-After-Free (UAF) vulnerability in Huawei HarmonyOS’s device node access module. The underlying issue is a memory misreference within the module, which can lead to device service exceptions if exploited. Reported impact notes from multiple sources align on potential ...

PT-2025-3278 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Device node access module affected versions not specified Description: The issue concerns a Use After Free UAF vulnerability in the device node access module. Successful exploitation of this vulnerability may cause service exceptions of the...

PT-2025-54579

Name of the Vulnerable Software and Affected Versions Node.js version 24 Description A memory leak exists in Node.js’s OpenSSL integration when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. Calling socket.getPeerCertificatetrue causes a memory leak for each...

CVE-2024-46973

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-46972

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-46972

CVE-2024-46972 is an Imagination Technologies PowerVR-GPU driver issue. The vulnerability arises from a faulty GPU system call path that can be triggered by code running with normal user permissions, leading to a use-after-free in the kernel. The CVE is documented with a local-execution impact pr...

CVE-2024-46972 GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...