Guest VM Memory Exploit in Imagination Technologies GPU Firmware

CVE-2024-46975

What is CVE-2024-46975?

A vulnerability exists in the GPU Firmware from Imagination Technologies, allowing malicious kernel software within a Guest Virtual Machine (VM) to manipulate shared memory with the GPU. This exploit enables an attacker to write data into the virtualised GPU memory of another Guest VM, posing significant risks to data integrity and confidentiality across virtual environments.

References