8.4
High
CVE-2024-23696 In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free
Description
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| powervr-gpu | Versions not published | |
| Android | Versions not published |
Other CVEs of powervr-gpu
The 14 CVEs of powervr-gpu →
CVE-2024-34729
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code
8.4
High
CVE-2024-34747
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code
8.4
High
CVE-2024-31337
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation
8.4
High
CVE-2024-31333
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow
7.8
High