GPU Memory Exposure Vulnerability in Imagination Technologies Software

CVE-2024-47896

What is CVE-2024-47896?

A vulnerability exists in Imagination Technologies' GPU Firmware where malicious software within a Guest VM can exploit shared memory interfaces to write data outside the designated virtualized GPU memory. This can lead to unauthorized access to sensitive data and potential manipulation of the host system's GPU resources. Users of affected GPU firmware versions should assess their security posture and implement necessary mitigations.

References