7.3
Élevée
CVE-2024-23697 In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free
Description
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| powervr-gpu | Versions non publiées | |
| Android | Versions non publiées |
Autres CVE de powervr-gpu
Les 14 CVE de powervr-gpu →
CVE-2024-34747
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code
8.4
Élevée
CVE-2024-31337
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation
8.4
Élevée
CVE-2024-34729
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code
8.4
Élevée
CVE-2024-31333
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow
7.8
Élevée