CVE-2024-52935

CVE-2024-52935: GPU DDK - psContext->eDM gives OOB write

Vendor Imagination Technologies

Product Graphics DDK

Weakness CWE-823

Published January 13, 2025

Last update January 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.

Key dates

02Disclosure timeline

January 13, 2025 CVE published

January 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-52935 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/823.html