Skip to main content

Use of Out-of-range Pointer Offset

CVE-2024-52935

Medium
4.1/10

Summary

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.

  • LOW
  • PHYSICAL
  • LOW
  • UNCHANGED
  • REQUIRED
  • NONE
  • LOW
  • LOW

CWE-823 - Use of Out-of-range Pointer Offset

The program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

References

Advisory Timeline

  • Published