CVE-2024-43704 GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process...

CVE-2024-43704

This vulnerability affects Imagination Technologies components, specifically the PowerVR-GPU subcomponent within the GPU DDK (version DDK24.2 RTM1 and earlier). The root cause is an out-of-bounds write in PVRSRVAcquireProcessHandleBase within handle.c due to improper input validation, which can l...