Imagination Technologies Graphics DDK up to 24.2 RTM1 GPU System Call exposure of resource

Summaryinfo

A vulnerability labeled as problematic has been found in Imagination Technologies Graphics DDK up to 24.2 RTM1. This affects an unknown part of the component GPU System Call Handler. Such manipulation leads to exposure of resource. This vulnerability is traded as CVE-2024-43704. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Imagination Technologies Graphics DDK up to 24.2 RTM1. Affected by this issue is an unknown part of the component GPU System Call Handler. The manipulation with an unknown input leads to a exposure of resource vulnerability. Using CWE to declare the problem leads to CWE-668. The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The impact remains unknown. CVE summarizes:

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.

The advisory is shared for download at imaginationtech.com. This vulnerability is handled as CVE-2024-43704 since 08/15/2024. There are neither technical details nor an exploit publicly available.

Upgrading to version 24.2 RTM2 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Imagination Technologies

Name

• Graphics DDK

Version

• 24.2 RTM1

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion