VDB
BDU%3A2024-00388
BDU%3A2024-00388
PUBLISHED
CVSS 4.900000095367432 MEDIUM
Уязвимость микропрограммного обеспечения процессоров AMD, Qualcomm и Imagination, позволяющая нарушителю извлечь данные из локальной памяти GPU
Risk Scores
CVSS 2.0
4.900000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Advanced Micro Devices Inc., Qualcomm Technologies Inc., Imagination Technologies | AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Ryzen 3000 Series Processors with Radeon Graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7045 Series Mobile Processors, AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon RX 7000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon PRO V520, AMD Radeon PRO V620, AMD Radeon Instinct MI25, AMD Radeon Instinct MI50, AMD Instinct MI100, AMD Instinct MI210, AMD Instinct MI250, AMD Instinct MI300A, AMD Instinct MI300X, Adreno a630, DDK |
Timeline
- Jan 18, 2024 CVE Published
References
- https://vuldb.com/ru/?id.250875 url
- https://www.opennet.ru/opennews/art.shtml?num=60451 url
- https://xakep.ru/2024/01/18/leftoverlocals/ url
- https://github.com/trailofbits/LeftoverLocalsRelease url
- https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions url
- https://www.vulkan.org url
- https://developer.mozilla.org/en-US/docs/Web/API/WebGPU_API url
- https://researchcomputing.princeton.edu/support/knowledge-base/gpu-computing url
- https://developer.apple.com/documentation/metal/performing_calculations_on_a_gpu url
- https://devblogs.microsoft.com/directx/announcing-the-opencl-and-opengl-compatibility-pack-for-windows-10-on-arm/ url
- https://source.android.com/docs/core/graphics/arch-vulkan url
- https://developer.nvidia.com/cuda-toolkit url
- https://www.amd.com/en/technologies/vulkan url
- https://developer.arm.com/Processors/Mali-G78 url
- https://www.imaginationtech.com/product/ge8320/ url
- https://github.com/Mesa3D/mesa/blob/957009978ef6d7121fc0d710d03bc20097d4d46b/src/amd/vulkan/radv_shader.c#L709 url
- https://dl.acm.org/doi/10.1145/2801153 url
- https://arxiv.org/pdf/1605.06610.pdf url
- https://lore.kernel.org/linux-firmware/20240111114032.126035-1-quic_akhilpo@quicinc.com/T/#u url
- https://www.imaginationtech.com/gpu-driver-vulnerabilities/ url
…and 1 more