PT-2023-8468 · Unknown · Powervr Gpu Driver

CVE-2023-21228 · Publicado 2023-12-01 · Atualizado 2023-12-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PowerVR GPU driver versions (affected versions not specified)

Description The issue is related to a buffer overflow in the PowerVR GPU driver, specifically in the PMR ReadBytes() function for Android and ChromeOS, and an out of bounds write in the PMRChangeSparseMemOSMem function of physmem osmem linux.c. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-20

CWE-787

CWE-119

Identificadores relacionados

BDU:2024-00918

CVE-2023-21228

Produtos afetados

Powervr Gpu Driver

Referências · 9

• https://t.me/cvenotify/64815 · Publicação no Telegram
• https://t.me/cvenotify/62210 · Publicação no Telegram
• https://cybersecurity-help.cz/vdb/SB2023120445 · Nota
• https://source.android.com/security/bulletin/2023-12-01 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1731851963346624583 · Publicação no Twitter
• https://t.me/cvenotify/62791 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2024-00918 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-21228 · Nota de Segurança
• https://chromereleases.googleblog.com/2024/02/long-term-support-channel-update-for.html · Nota