CVE-2015-8089: Undefined Security Weakness

The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a denial of service system crash or gain privileges via a...

MacOS Insecure Swap File Vulnerability

It turns out that even with SIP enabled a regular root user can write to the swapfile under /private/var/vm/swapfile0 on MacOS. MacOS uses an insecure swap file CVE-2017-2494 This came out of a discussion with Jann Horn this afternoon; credit is his. It turns out that even with SIP enabled a...

NVIDIA Windows GPU Display Driver 375.x < 377.35 / 382.x < 382.05 Multiple Vulnerabilities

The version of the NVIDIA GPU display driver installed on the remote Windows host is 375.x prior to 377.35 or 382.x prior to 382.05. It is, therefore, affected by multiple vulnerabilities : - An uninitialized pointer flaw exists in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape due t...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07278)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the GPU firmware in NVIDIA GPU Display Driver due to the program failing to properly enforce access control. An attacker could exploit the vulnerability to elevate...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07280)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the kernel mode layer handler in the NVIDIA GPU Display Driver. The vulnerability can be exploited to cause a denial of service null pointer backreference or elevatio...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2017-07447)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A denial of service vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07444)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver, which arises when the...

DEBIAN-CVE-2017-0351

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0352

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges...

CVE-2017-0351

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

Design/Logic Flaw

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash via vectors involving an application that passes crafted input to the GPU driver...

CVE-2015-7740

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash via vectors involving an application that passes crafted input to the GPU driver...

CVE-2015-7740

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash via vectors involving an application that passes crafted input to the GPU driver...

PT-2017-7265

Name of the Vulnerable Software and Affected Versions Huawei P7 versions before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 Huawei P8 ALE-UL00 versions before ALE-UL00B211 Description The issue allows local users to cause a denial of service, resulting in an OS crash. This is achieved by...

CVE-2015-7740: Improper Input Validation

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service OS crash via vectors involving an application that passes crafted input to the GPU driver...

Out-of-bounds

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...

CVE-2017-5538

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...

CVE-2017-5538

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...

CVE-2017-5538

CVE-2017-5538 affects Samsung devices running M(6.0)/N(7.0) with Exynos AP; vulnerable component is the GPU driver Mali kernel code (kbase_dispatch in arm/t7xx/r5p0/mali_kbase_core_linux.c). The issue is an out-of-bounds read triggered via unknown vectors, with unspecified impact. Exploitation de...

CVE-2017-5538: Out-of-bounds Read

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...