CVE-2023-44216
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software...
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
5.3
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
- Record
CVE-2023-44216- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
CVE List No score
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
- Record
CVE-2023-44216- Updated
- 2026-11-02
EUVDEUVD-2023-48575 No score
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
- Record
EUVD-2023-48575- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjqr-32v8-6gf9
5.3
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software...
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
- Record
GHSA-fjqr-32v8-6gf9- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-44216
5.3
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
- Record
UBUNTU-CVE-2023-44216- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-304Ubuntu:16.04:LTS |
All versions, plus listed versions 304.128-0ubuntu1304.131-0ubuntu2304.131-0ubuntu3304.132-0ubuntu0.16.04.2304.134-0ubuntu0.16.04.1304.135-0ubuntu0.16.04.1304.135-0ubuntu0.16.04.2304.135-0ubuntu0.16.04.3 |
None known |
nvidia-graphics-drivers-340Ubuntu:16.04:LTS |
All versions, plus listed versions 340.93-0ubuntu1340.93-0ubuntu2340.96-0ubuntu1340.96-0ubuntu2340.96-0ubuntu3 Show 6 moreShow less340.98-0ubuntu0.16.04.1340.101-0ubuntu0.16.04.1340.102-0ubuntu0.16.04.1340.102-0ubuntu0.16.04.2340.104-0ubuntu0.16.04.1340.107-0ubuntu0.16.04.2 |
None known |
nvidia-graphics-drivers-340Ubuntu:20.04:LTS |
All versions, plus listed versions 340.107-0ubuntu7340.107-0ubuntu8340.107-0ubuntu9340.108-0ubuntu1340.108-0ubuntu2340.108-0ubuntu5.20.04.1340.108-0ubuntu5.20.04.2 |
None known |
nvidia-graphics-drivers-390Ubuntu:20.04:LTS |
All versions, plus listed versions 390.129-0ubuntu2390.132-0ubuntu1390.132-0ubuntu2390.138-0ubuntu0.20.04.1390.141-0ubuntu0.20.04.1 Show 6 moreShow less390.143-0ubuntu0.20.04.1390.144-0ubuntu0.20.04.1390.147-0ubuntu0.20.04.1390.151-0ubuntu0.20.04.1390.154-0ubuntu0.20.04.1390.157-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-430Ubuntu:20.04:LTS |
All versions, plus listed versions 430.50-0ubuntu2430.50-0ubuntu3 |
None known |
nvidia-graphics-drivers-435Ubuntu:20.04:LTS |
All versions, plus listed versions 435.21-0ubuntu2435.21-0ubuntu3435.21-0ubuntu4435.21-0ubuntu5435.21-0ubuntu6435.21-0ubuntu7 |
None known |
nvidia-graphics-drivers-440Ubuntu:20.04:LTS |
All versions, plus listed versions 440.31-0ubuntu1440.36-0ubuntu1440.44-0ubuntu1440.44-0ubuntu2440.59-0ubuntu1 Show 9 moreShow less440.59-0ubuntu2440.64-0ubuntu1440.64-0ubuntu2440.64-0ubuntu3440.82-0ubuntu1440.82+really.440.64-0ubuntu4440.82+really.440.64-0ubuntu5440.82+really.440.64-0ubuntu6440.100-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-450Ubuntu:20.04:LTS |
All versions, plus listed versions 450.66-0ubuntu0.20.04.1450.80.02-0ubuntu0.20.04.2450.102.04-0ubuntu0.20.04.1450.102.04-0ubuntu0.20.04.2450.119.03-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-460Ubuntu:20.04:LTS |
All versions, plus listed versions 460.32.03-0ubuntu0.20.04.1460.39-0ubuntu0.20.04.1460.56-0ubuntu0.20.04.1460.73.01-0ubuntu0.20.04.1460.80-0ubuntu0.20.04.2460.91.03-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-460-serverUbuntu:20.04:LTS |
All versions, plus listed versions 460.32.03-0ubuntu0.20.04.1460.32.03-0ubuntu0.20.04.2460.73.01-0ubuntu0.20.04.1460.91.03-0ubuntu0.20.04.1460.106.00-0ubuntu0.20.04.1460.106.00-0ubuntu0.20.04.2 |
None known |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-510Ubuntu:20.04:LTS |
All versions, plus listed versions 510.47.03-0ubuntu0.20.04.1510.54-0ubuntu0.20.04.1510.60.02-0ubuntu0.20.04.2510.73.05-0ubuntu0.20.04.1510.85.02-0ubuntu0.20.04.1510.108.03-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-520Ubuntu:20.04:LTS |
All versions, plus listed versions 520.56.06-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-390Ubuntu:22.04:LTS |
All versions, plus listed versions 390.144-0ubuntu2390.144-0ubuntu3390.147-0ubuntu1390.151-0ubuntu0.22.04.1390.154-0ubuntu0.22.04.1390.157-0ubuntu0.22.04.1390.157-0ubuntu0.22.04.2 |
None known |
nvidia-graphics-drivers-418-serverUbuntu:22.04:LTS |
All versions, plus listed versions 418.211.00-0ubuntu2418.226.00-0ubuntu2418.226.00-0ubuntu3418.226.00-0ubuntu4418.226.00-0ubuntu5~0.22.04.1 |
None known |
nvidia-graphics-drivers-430Ubuntu:22.04:LTS |
All versions, plus listed versions 430.50-0ubuntu3 |
None known |
nvidia-graphics-drivers-440Ubuntu:22.04:LTS |
All versions, plus listed versions 440.100-0ubuntu1 |
None known |
nvidia-graphics-drivers-450Ubuntu:22.04:LTS |
All versions, plus listed versions 450.119.03-0ubuntu1 |
None known |
nvidia-graphics-drivers-455Ubuntu:22.04:LTS |
All versions, plus listed versions 455.45.01-0ubuntu1 |
None known |
nvidia-graphics-drivers-460Ubuntu:22.04:LTS |
All versions, plus listed versions 460.91.03-0ubuntu1 |
None known |
nvidia-graphics-drivers-510Ubuntu:22.04:LTS |
All versions, plus listed versions 510.54-0ubuntu1510.54-0ubuntu2510.60.02-0ubuntu1510.73.05-0ubuntu0.22.04.1510.85.02-0ubuntu0.22.04.1510.85.02-0ubuntu0.22.04.2510.108.03-0ubuntu0.22.04.1 |
None known |
nvidia-graphics-drivers-520Ubuntu:22.04:LTS |
All versions, plus listed versions 520.56.06-0ubuntu0.22.04.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-44216 is a medium vulnerability (CVSS 5.3) in Amd Ryzen 5 7600x, published September 26, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. No source names a fixed version.
References
hertzbleed.com/gpu.zip
hertzbleed.com/gpu.zip/GPU-zip.pdf
github.com/UT-Security/gpu-zip
w3.org/TR/filter-effects-1
blog.imaginationtech.com/reducing-bandwidth-pvric
blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level
Show 7 moreShow less
arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack
news.ycombinator.com/item?id=37663159
bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack
nvd.nist.gov/vuln/detail/CVE-2023-44216
github.com/advisories/GHSA-fjqr-32v8-6gf9
ubuntu.com/security/CVE-2023-44216
cve.org/CVERecord?id=CVE-2023-44216