Back to Database
Status published
Unknown
CVE-2024-43701
GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices
Vulnerability Description
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-43701
Credits & Attribution
No credits recorded in the NVD database.
More from Imagination Technologies
View All →CVE-2025-8109
GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation
Unknown
0
CVE-2025-6573
GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
Unknown
0
CVE-2025-58411
GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF
Unknown
0
CVE-2025-58410
GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR
Unknown
0
CVE-2025-58409
GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory
Unknown
0
Affected Vendor
Imagination Technologies
View all reports →Affected Software
Graphics DDK
Vulnerable Versions:
1.17, 24.2 RTM2
Timeline
Official Publish:
October 14th, 2024
Last Modified:
October 15th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
MITRE ATT&CK TTPs
T1190
Exploit Public-Facing Application
Initial Access
T1068
Exploitation for Privilege Escalation
Privilege Escalation
T1055
Process Injection
Defense Evasion
T1105
Ingress Tool Transfer
Command and Control
T1485
Data Destruction
Impact
T1574
Hijack Execution Flow
Persistence
T1565
Data Manipulation
Impact
T1499
Endpoint Denial of Service
Impact