ZeroHour

CVE-2023-4969

PoC
CVSS 3.1
6.5 medium
EPSS
1%p66
Published
()
Modified
Description

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.

Vendors
khronosimaginationtechamd
Products
opencl, vulkan, ddk, instinct mi300x firmware, instinct mi300a firmware, instinct mi250 firmware, instinct mi210 firmware, instinct mi100 firmware, radeon instinct mi50 firmware, radeon instinct mi25 firmware, radeon pro v620 firmware, radeon pro v520 firmware
Weakness
CWE-401
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

In the news