{"id":"CVE-2024-47892","aliases":["A-365954523","ASB-A-365954523","EUVD-2024-42857","GHSA-rr64-3qwv-pgf9","PP-160576"],"status":"published","title":"GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00138,"percentile":0.03204,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362","CWE-416"],"published":"2024-12-13T17:35:24Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2025-02-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-02-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"imagination technologies","product":"graphics ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47892"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-rr64-3qwv-pgf9"},{"url":"https://source.android.com/security/bulletin/2025-02-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47892","title":"GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T17:35:24.387Z","modified":"2024-12-16T18:12:42.215Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416","CWE-362"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-42857","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T17:35:24Z","modified":"2024-12-16T18:12:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:35.014369Z"}],"ghsa":[{"id":"GHSA-rr64-3qwv-pgf9","title":"Software installed and run as a non-privileged user may conduct GPU system calls to read and...","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T18:31:56Z","modified":"2024-12-16T21:32:02Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:59:13.042537Z"}],"nvd":[{"id":"CVE-2024-47892","description":"Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.","status":"published","published":"2024-12-13T18:15:20.773Z","modified":"2026-06-17T07:57:55.907Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-362","CWE-416"],"updated_at":"2026-11-02T14:10:40.137849Z"}],"osv":[{"id":"ASB-A-365954523","description":"In _ExtractAllPages of physmem_osmem_linux.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-02-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-09T17:05:18.698671Z"}]}}