Back to Database
Status published
Unknown
CVE-2024-52938
GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write
Vulnerability Description
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write of data outside the Guest's virtualised GPU memory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-52938
Credits & Attribution
No credits recorded in the NVD database.
More from Imagination Technologies
View All →CVE-2025-8109
GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation
Unknown
0
CVE-2025-6573
GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
Unknown
0
CVE-2025-58411
GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF
Unknown
0
CVE-2025-58410
GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR
Unknown
0
CVE-2025-58409
GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory
Unknown
0
Affected Vendor
Imagination Technologies
View all reports →Affected Software
Graphics DDK
Vulnerable Versions:
1.15 RTM, 24.3 RTM
Timeline
Official Publish:
January 13th, 2025
Last Modified:
January 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.