Lucene search
+L

257 matches found

CVE
CVE
added 2024/09/11 12:09 a.m.132 views

CVE-2024-31336

The CVE-2024-31336 entry concerns PVRSRVBridgeRGXKickTA3D2 in server_rgxta3d_bridge.c, affecting the PowerVR-GPU component. The issue is described as an arbitrary code execution caused by improper input validation, enabling local kernel privilege escalation without extra privileges or user intera...

8.4CVSS8.3AI score0.001EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2024/08/06 6:12 a.m.90 views

Google Patches New Android Kernel Vulnerability Exploited in the Wild

Google has addressed a high-severity security flaw impacting the Android kernel that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel. "There are indications that CVE-2024-3697...

8.8CVSS8AI score0.73185EPSS
SaveExploits7
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.24 views

The vulnerabilities of microprogramming software in AMD, Qualcomm, and Imagination allow attackers to extract data from the local memory of GPUs.

The vulnerabilities of microprogramming software for AMD, Qualcomm, and Imagination relate to insufficient isolation of the GPU’s local memory, as well as the lack of cleanup after processes are executed on the GPU. Exploiting these vulnerabilities can allow attackers to extract data from the GPU...

5.1CVSS6.9AI score0.01185EPSS
SaveExploits1References21Affected Software2
Positive Technologies
Positive Technologies
added 2024/01/16 12:00 a.m.12 views

PT-2024-1106

Name of the Vulnerable Software and Affected Versions GPU vendors and host devices affected, including Apple, AMD, Qualcomm, and Imagination GPUs. Specific affected versions are not specified, but it is mentioned that the issue affects various architectures and devices, including some iPhone, iPa...

6.5CVSS6.8AI score0.01185EPSS
SaveExploits1References52
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.4 views

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

5.3CVSS5.8AI score0.01809EPSS
SaveExploits1References10
OSV
OSV
added 2023/09/27 3:19 p.m.13 views

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

5.3CVSS5.8AI score0.01809EPSS
SaveExploits1References9
NVD
NVD
added 2023/09/27 3:19 p.m.29 views

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

5.3CVSS5.3AI score0.01809EPSS
SaveExploits1References9
Prion
Prion
added 2023/09/27 3:19 p.m.25 views

Design/Logic Flaw

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

2.6CVSS5.3AI score0.01809EPSS
SaveExploits1References9Affected Software3
OSV
OSV
added 2023/09/27 3:19 p.m.15 views

UBUNTU-CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

5.3CVSS5.8AI score0.01809EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
added 2023/09/27 12:00 a.m.58 views

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

5.3CVSS6.1AI score0.01809EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.13 views

Imagination Security Breach

Imagination is a chip from Imagination. A security vulnerability exists in Imagination 2018 and prior versions, which stems from a software-transparent compression provided by PVRIC on GPU devices, which can be exploited for cross-origin pixel stealing attacks against feTurbulence and feBlend in...

5.3CVSS6.8AI score0.01809EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2023/09/26 12:00 a.m.17 views

PT-2023-29149 · Imagination Technologies · Imagination Gpu

Name of the Vulnerable Software and Affected Versions: Imagination GPU devices versions 2018 and later Description: The issue allows for cross-origin pixel-stealing attacks against certain functions in the SVG Filter specification, such as feTurbulence and feBlend. This can enable attackers to...

5.3CVSS5.1AI score0.01809EPSS
SaveExploits1References14
Cvelist
Cvelist
added 2023/09/26 12:00 a.m.39 views

CVE-2023-44216

PVRIC PowerVR Image Compression on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately...

5.6AI score0.01809EPSS
SaveExploits1References9
CVE
CVE
added 2023/09/26 12:00 a.m.90 views

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...

5.3CVSS5.3AI score0.01809EPSS
SaveExploits1References9Affected Software5
CNNVD
CNNVD
added 2022/08/01 12:00 a.m.9 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that originates from a vulnerability in the PowerVR-GPU component of Imagination Technologies...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/01 12:00 a.m.22 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that originates from a vulnerability in the PowerVR-GPU component of Imagination Technologies...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/07/06 12:00 a.m.13 views

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that originates from the Imagination Technologies High vulnerability...

9.8CVSS8.3AI score0.00402EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/07/06 12:00 a.m.12 views

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that originates from the Imagination Technologies High vulnerability...

9.8CVSS8.4AI score0.00402EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/05/06 1:15 p.m.6 views

CVE-2021-24236

The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename...

9.8CVSS5.9AI score0.0714EPSS
SaveExploits2References3Affected Software1
CNVD
CNVD
added 2019/11/05 12:00 a.m.20 views

Google Chrome OS Imagination Technologies driver input validation error vulnerability

Chrome OS is a web-based, lightweight, open source operating system from Google, USA. Imagination Technologies driver is a graphics driver used in it. An input validation error vulnerability exists in versions of the Imagination Technologies driver prior to R74-11895.B, R75 prior to R75-12105.B,...

9.3CVSS6.8AI score0.00501EPSS
SaveExploits1References1
Rows per page
Query Builder