All the vulnerabilites related to Khronos Group - OpenCL
cve-2023-4969
Vulnerability from cvelistv5
Published
2024-01-16 17:01
Modified
2024-08-02 07:44
Severity ?
EPSS score ?
Summary
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.
References
Impacted products
Vendor | Product | Version | |||||
---|---|---|---|---|---|---|---|
▼ | Khronos Group | OpenCL |
Version: 3.0.11 < |
||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T07:44:53.327Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions" }, { "tags": [ "x_transferred" ], "url": "https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html" }, { "tags": [ "x_transferred" ], "url": "https://kb.cert.org/vuls/id/446598" }, { "tags": [ "x_transferred" ], "url": "https://blog.trailofbits.com" }, { "tags": [ "x_transferred" ], "url": "https://www.kb.cert.org/vuls/id/446598" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "OpenCL", "vendor": "Khronos Group", "versions": [ { "lessThanOrEqual": "3.0.11", "status": "affected", "version": "3.0.11", "versionType": "custom" } ] }, { "product": "Vulkan", "vendor": "Khronos Group", "versions": [ { "lessThanOrEqual": "1.3.224", "status": "affected", "version": "1.3.224", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Trail of Bits" } ], "descriptions": [ { "lang": "en", "value": "A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures." } ], "problemTypes": [ { "descriptions": [ { "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", "lang": "en" } ] }, { "descriptions": [ { "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en" } ] } ], "providerMetadata": { "dateUpdated": "2024-01-16T17:01:29.598Z", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc" }, "references": [ { "url": "https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions" }, { "url": "https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html" }, { "url": "https://kb.cert.org/vuls/id/446598" }, { "url": "https://blog.trailofbits.com" }, { "url": "https://www.kb.cert.org/vuls/id/446598" } ], "source": { "discovery": "EXTERNAL" }, "title": "GPU kernel implementations susceptible to memory leak", "x_generator": { "engine": "VINCE 2.1.9", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2023-4969" } } }, "cveMetadata": { "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2023-4969", "datePublished": "2024-01-16T17:01:29.598Z", "dateReserved": "2023-09-14T17:07:51.604Z", "dateUpdated": "2024-08-02T07:44:53.327Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }