{"id":"CVE-2024-43704","aliases":["A-363073314","ASB-A-363073314","EUVD-2024-40436","GHSA-mh9h-44jv-cw34"],"status":"published","title":"GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00173,"percentile":0.06793,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-668"],"published":"2024-11-18T04:54:20Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2025-01-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-01-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"imagination technologies","product":"graphics ddk"},{"vendor":"imaginationtech","product":"ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43704"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-mh9h-44jv-cw34"},{"url":"https://source.android.com/security/bulletin/2025-01-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-43704","title":"GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.","status":"published","published":"2024-11-18T04:54:20.225Z","modified":"2024-11-18T13:52:26.748Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:33:58.357949Z"}],"euvd":[{"id":"EUVD-2024-40436","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.","status":"published","published":"2024-11-18T04:54:20Z","modified":"2024-11-18T13:52:26Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:57.661321Z"}],"ghsa":[{"id":"GHSA-mh9h-44jv-cw34","title":"Software installed and run as a non-privileged user may conduct improper GPU system calls to gain...","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.","status":"published","published":"2024-11-18T06:30:35Z","modified":"2024-11-18T15:34:26Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:58:52.476096Z"}],"nvd":[{"id":"CVE-2024-43704","description":"Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.","status":"published","published":"2024-11-18T05:15:04.687Z","modified":"2026-06-17T07:51:34.2Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:10:37.281254Z"}],"osv":[{"id":"ASB-A-363073314","description":"In PVRSRVAcquireProcessHandleBase of handle.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-01-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-10T17:35:06.383013Z"}]}}