Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.
Published: 2024-11-30
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 02 Dec 2024 00:15:00 +0100

Type Values Removed Values Added
First Time appeared Imaginationtech
Imaginationtech ddk
CPEs cpe:2.3:a:imaginationtech:ddk:-:*:*:*:*:*:*:*
Vendors & Products Imaginationtech
Imaginationtech ddk
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 30 Nov 2024 03:45:00 +0100

Type Values Removed Values Added
Description Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.
Title GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages
Weaknesses CWE-280
References

Subscriptions

Imaginationtech Ddk
cve-icon MITRE

Status: PUBLISHED

Assigner: imaginationtech

Published:

Updated: 2024-12-01T23:04:15.021Z

Reserved: 2024-08-15T08:21:31.533Z

Link: CVE-2024-43702

cve-icon Vulnrichment

Updated: 2024-12-01T23:03:36.752Z

cve-icon NVD

Status : Deferred

Published: 2024-11-30T03:15:13.903

Modified: 2026-06-17T07:51:33.933

Link: CVE-2024-43702

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-280

    Improper Handling of Insufficient Permissions or Privileges