PT-2023-8464 · Imagination Technologies · Powervr Gpu Driver

CVE-2023-21215 · Publicado 2023-12-01 · Atualizado 2023-12-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PowerVR GPU driver versions (affected versions not specified)

Description The issue is related to a race condition in the DevmemIntAcquireRemoteCtx() function of the PowerVR GPU driver, which can lead to arbitrary code execution and local escalation of privilege in the kernel. This can be exploited without additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Time Of Check To Time Of Use

Race Condition

Enumeração de Fraquezas

CWE-20

CWE-367

CWE-362

Identificadores relacionados

BDU:2024-00914

CVE-2023-21215

Produtos afetados

Powervr Gpu Driver

Referências · 8

• https://t.me/cvenotify/62205 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-21215 · Nota de Segurança
• https://bdu.fstec.ru/vul/2024-00914 · Nota de Segurança
• https://cybersecurity-help.cz/vdb/SB2023120445 · Nota
• https://t.me/cvenotify/62224 · Publicação no Telegram
• https://t.me/cvenotify/64810 · Publicação no Telegram
• https://source.android.com/security/bulletin/2023-12-01 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2024/02/long-term-support-channel-update-for.html · Nota