CVE-2024-47895

CVE-2024-47895: GPU DDK - OOB read into fwlog due to unchecked block count

Vendor Imagination Technologies

Product Graphics DDK

Weakness CWE-823

Published January 13, 2025

Last update January 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.

Key dates

02Disclosure timeline

January 13, 2025 CVE published

January 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-47895 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/823.html

Related vulnerabilities

04Related CVE

CVE-2024-42386 Use of Out-of-range Pointer Offset in Mongoose Web Server library CVE-2024-42391 Use of Out-of-range Pointer Offset in Mongoose Web Server library CVE-2022-25709 Use of Out-of-range Pointer Offset in Data Modem CVE-2024-1013 Unixodbc: out of bounds stack write due to pointer-to-integer types conversion CVE-2023-43516 Use of out-of-range pointer offset in Video