Graphics DDK vulnerabilities
57 known vulnerabilities in Graphics DDK from Imagination Technologies. 57 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.4 High severity
Graphics DDK: Time-of-check Time-of-use (TOCTOU) Race Condition
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
- 7.5 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
- 9.8 Critical severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from the trusted execution environment (TEE).
- 7.8 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU drive
- 7.8 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.
- 8.2 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
- 7.1 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU drive
- 7.8 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver
- 7.8 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write data outside the Guest's virtualised GPU memory.
- 7.9 High severity
Graphics DDK: Privilege Context Switching Error
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory.
- 7.3 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
- 7.8 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write of data outside the Guest's virtualised GPU memory.
- 7.1 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.
- 7.1 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.
- 7.8 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory.
- 8.1 High severity
Graphics DDK: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.
- 8.1 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.