GPU Memory Exposure Vulnerability in Imagination Technologies Software
CVE-2024-47896

Currently unrated

Key Information:

Vendor
Imagination Technologies
Status
Graphics Ddk
Vendor
CVE Published:
22 February 2025

Summary

A vulnerability exists in Imagination Technologies' GPU Firmware where malicious software within a Guest VM can exploit shared memory interfaces to write data outside the designated virtualized GPU memory. This can lead to unauthorized access to sensitive data and potential manipulation of the host system's GPU resources. Users of affected GPU firmware versions should assess their security posture and implement necessary mitigations.

Affected Version(s)

Graphics DDK Linux 1.15 RTM <= 24.3 RTM

Graphics DDK Linux 25.1 RTM

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.