{"id":"CVE-2024-43702","aliases":["A-363071287","ASB-A-363071287","EUVD-2024-40282","GHSA-2m53-6p59-jfh3"],"status":"published","title":"GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00323,"percentile":0.25583,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-280"],"published":"2024-11-30T02:30:25Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2025-04-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-04-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"imagination technologies","product":"graphics ddk"},{"vendor":"imaginationtech","product":"ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43702"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-2m53-6p59-jfh3"},{"url":"https://source.android.com/security/bulletin/2025-04-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-43702","title":"GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.","status":"published","published":"2024-11-30T02:30:25.404Z","modified":"2024-12-01T23:04:15.021Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T14:33:58.357949Z"}],"euvd":[{"id":"EUVD-2024-40282","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.","status":"published","published":"2024-11-30T02:30:25Z","modified":"2024-12-01T23:04:15Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:04:44.03074Z"}],"ghsa":[{"id":"GHSA-2m53-6p59-jfh3","title":"Software installed and run as a non-privileged user may conduct improper GPU system calls to...","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.","status":"published","published":"2024-11-30T03:32:09Z","modified":"2024-12-02T00:35:08Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T14:59:00.407025Z"}],"nvd":[{"id":"CVE-2024-43702","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.","status":"published","published":"2024-11-30T03:15:13.903Z","modified":"2026-06-17T07:51:33.933Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T14:10:38.973941Z"}],"osv":[{"id":"ASB-A-363071287","description":"In RGXCreateHWRTDataSet of rgxta3d.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-04-01T00:00:00Z","modified":"2026-11-10T16:45:41.426023455Z","updated_at":"2026-11-10T17:35:06.383013Z"}]}}