CVE-2018-8781

A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the drivers/gpu/drm/udl/udlfb.c:udlfbmmap function. An attacker with access to the udldrmfb driver could exploit this to obtain full read and write permissions on kernel physical pages,...

CVE-2019-19082

A memory leak flaw was found in the Linux kernel. A system crash occurs under very specific, hard to obtain conditions, when the AMD GPU Display Engine configuration initialization handles resource cleaning when a failure occurs. The highest threat from this vulnerability is system availability...

TechPowerUp GPU-Z Code Execution Vulnerability

TechPowerUp GPU-Z is a lightweight application for managing and controlling video cards and graphics processors. A security vulnerability exists in the GPU-Z.sys file in TechPowerUp GPU-Z versions prior to 2.23.0. An attacker could exploit this vulnerability to execute Ring-0 code and elevate...

CVE-2019-7245

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7245

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Privilege escalation

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7245

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7245

Summary: TechPowerUp GPU-Z’s GPU-Z.sys driver prior to 2.23.0 exposes a wrmsr instruction via an IOCTL, with improper MSR filtering. This allows arbitrary MSR writes and can lead to Ring-0 code execution and privilege escalation. Impact: high (privilege escalation, potential full control). Affect...

NVIDIA D3D10 Driver nvwgf2umx_cfg.dll nvwg FTOI code execution vulnerability

Summary An exploitable code execution vulnerability exists in the nvwg functionality of NVIDIA Corporation NVIDIA D3D10 driver nvwgf2umxcfg.dll, version 442.50 - 26.21.14.4250. A specially crafted shader could allow an adversary to execute remote code. An attacker can use this vulnerability to...

CVE-2019-20600

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

CVE-2019-20600

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

Double free

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

CVE-2019-20577

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

CVE-2019-20577

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

CVE-2019-20600

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

CVE-2019-20600

CVE-2019-20600 affects Samsung mobile devices running O(8.0) and P(9.0) on Exynos8890 systems. The issue is a use-after-free in the MALI GPU driver. Affected component: Mali GPU driver in affected Samsung devices; root cause: use-after-free vulnerability. The provided documents do not specify the...

CVE-2019-20577

CVE-2019-20577 affects Samsung mobile devices running P(9.0) on Exynos chipsets, where the Mali GPU driver can cause a kernel panic. The issue is documented across multiple sources (NVD, Red Hat RH:CVE-2019-20577, CVE records) with Samsung’s internal reference SVE-2019-14372 (August 2019). Public...

CVE-2019-20577

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

NVIDIA Windows GPU Display Driver (Feb 2020)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities. - A privilege escalation vulnerability exists in NVIDIA Control Panel component. An unauthenticated, local attacker can exploit this, via corrputing a system file, to gain priviledged access to the...