{"id":"CVE-2024-46971","aliases":["EUVD-2024-42188","GHSA-3gr3-rr4m-976p"],"status":"published","title":"GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00138,"percentile":0.03219,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362","CWE-416"],"published":"2024-12-13T17:32:52Z","modified":"2026-06-17T07:56:17Z","products":[{"vendor":"imagination technologies","product":"graphics ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46971"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-3gr3-rr4m-976p"}],"sources":{"cve":[{"id":"CVE-2024-46971","title":"GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T17:32:52.879Z","modified":"2024-12-16T16:43:33.097Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416","CWE-362"],"updated_at":"2026-11-02T14:34:08.843708Z"}],"euvd":[{"id":"EUVD-2024-42188","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T17:32:52Z","modified":"2024-12-16T16:43:33Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:35.519932Z"}],"ghsa":[{"id":"GHSA-3gr3-rr4m-976p","title":"Software installed and run as a non-privileged user may conduct GPU system calls to read and...","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T18:31:56Z","modified":"2024-12-16T18:32:15Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:59:12.48487Z"}],"nvd":[{"id":"CVE-2024-46971","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T18:15:20.46Z","modified":"2026-06-17T07:56:17.313Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-362","CWE-416"],"updated_at":"2026-11-02T14:10:40.137849Z"}]}}