7.8
High
CVE-2024-23698 In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check
Description
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| powervr-gpu | Versions not published | |
| Android | Versions not published |
Other CVEs of powervr-gpu
The 14 CVEs of powervr-gpu →
CVE-2024-34747
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code
8.4
High
CVE-2024-31337
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation
8.4
High
CVE-2024-34729
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code
8.4
High
CVE-2024-31333
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow
7.8
High