CVE-2024-43703 - Vulnerability Details - OpenCVE

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0015.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Imaginationtech	Ddk

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.imaginationtech.com/gpu-driver-vulnerabilities/

History

Sun, 01 Dec 2024 23:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Imaginationtech Imaginationtech ddk
CPEs		cpe:2.3:a:imaginationtech:ddk:-:::::::*
Vendors & Products		Imaginationtech Imaginationtech ddk
Metrics		cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sat, 30 Nov 2024 02:45:00 +0000

Type	Values Removed	Values Added
Description		Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.
Title		GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF
Weaknesses		CWE-416
References		https://www.imaginationtech.com/gpu-driver-vulnerabilities/

MITRE

Status: PUBLISHED

Assigner: imaginationtech

Published: 2024-11-30T02:39:25.336Z

Updated: 2024-12-01T23:03:00.888Z

Reserved: 2024-08-15T08:21:31.533Z

Link: CVE-2024-43703

Vulnrichment

Updated: 2024-12-01T23:02:22.312Z

NVD

Status : Received

Published: 2024-11-30T03:15:14.030

Modified: 2024-12-01T23:15:06.383

Link: CVE-2024-43703

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-43703", "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "state": "PUBLISHED", "assignerShortName": "imaginationtech", "dateReserved": "2024-08-15T08:21:31.533Z", "datePublished": "2024-11-30T02:39:25.336Z", "dateUpdated": "2024-12-01T23:03:00.888Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Linux", "Android"], "product": "Graphics DDK", "vendor": "Imagination Technologies", "versions": [{"lessThanOrEqual": "24.2 RTM2", "status": "affected", "version": "1.13 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "24.3 RTM"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve u</span><span style=\"background-color: rgb(255, 255, 255);\">nauthorised reads and writes of physical memory from the GPU HW.</span>"}], "value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW."}], "impacts": [{"capecId": "CAPEC-124", "descriptions": [{"lang": "en", "value": "CAPEC - CAPEC-124: Shared Resource Manipulation (Version 3.9)"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE - CWE-416: Use After Free (4.16)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "shortName": "imaginationtech", "dateUpdated": "2024-11-30T02:39:25.336Z"}, "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "source": {"discovery": "UNKNOWN"}, "title": "GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "imaginationtech", "product": "ddk", "cpes": ["cpe:2.3:a:imaginationtech:ddk:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.13_rtm", "status": "affected", "lessThanOrEqual": "24.2_rtm2", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-12-01T23:02:56.824318Z", "id": "CVE-2024-43703", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-01T23:03:00.888Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-43703", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-12-01T23:02:56.824318Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:imaginationtech:ddk:-:*:*:*:*:*:*:*"], "vendor": "imaginationtech", "product": "ddk", "versions": [{"status": "affected", "version": "1.13_rtm", "versionType": "custom", "lessThanOrEqual": "24.2_rtm2"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-01T23:02:22.312Z"}}], "cna": {"title": "GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-124", "descriptions": [{"lang": "en", "value": "CAPEC - CAPEC-124: Shared Resource Manipulation (Version 3.9)"}]}], "affected": [{"vendor": "Imagination Technologies", "product": "Graphics DDK", "versions": [{"status": "affected", "version": "1.13 RTM", "versionType": "custom", "lessThanOrEqual": "24.2 RTM2"}, {"status": "unaffected", "version": "24.3 RTM"}], "platforms": ["Linux", "Android"], "defaultStatus": "unknown"}], "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve u</span><span style=\"background-color: rgb(255, 255, 255);\">nauthorised reads and writes of physical memory from the GPU HW.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE - CWE-416: Use After Free (4.16)"}]}], "providerMetadata": {"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "shortName": "imaginationtech", "dateUpdated": "2024-11-30T02:39:25.336Z"}}}, "cveMetadata": {"cveId": "CVE-2024-43703", "state": "PUBLISHED", "dateUpdated": "2024-12-01T23:03:00.888Z", "dateReserved": "2024-08-15T08:21:31.533Z", "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "datePublished": "2024-11-30T02:39:25.336Z", "assignerShortName": "imaginationtech"}, "dataVersion": "5.1"}