{"id":"CVE-2024-47896","aliases":["A-380438039","ASB-A-380438039","EUVD-2025-4434","GHSA-fwgj-3f9c-7vf7"],"status":"published","title":"GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf-\u003eui32WriteIndex","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00158,"percentile":0.04955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-823"],"published":"2025-02-22T14:50:58Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2025-05-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-05-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"imagination technologies","product":"graphics ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47896"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-fwgj-3f9c-7vf7"},{"url":"https://source.android.com/security/bulletin/2025-05-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47896","title":"GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf-\u003eui32WriteIndex","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-02-22T14:50:58.213Z","modified":"2025-03-05T16:56:53.389Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2025-4434","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-02-22T14:50:58Z","modified":"2025-03-05T16:56:53Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:53:13.774215Z"}],"ghsa":[{"id":"GHSA-fwgj-3f9c-7vf7","title":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU...","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-02-22T15:30:51Z","modified":"2025-03-05T18:33:06Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T15:00:09.656651Z"}],"nvd":[{"id":"CVE-2024-47896","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-02-22T15:15:10.503Z","modified":"2026-06-17T07:57:56.437Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T14:10:44.508862Z"}],"osv":[{"id":"ASB-A-380438039","description":"In rgxfw_hwr_log_info of rgxfw_hwr.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-05-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:16.371056Z"}]}}