CVE-2019-16508
01.10.2019, 12:15
The Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and R76 before R76-12208.0.0 allows attackers to trigger an Integer Overflow and gain privileges via a malicious application. This occurs because of intentional access for the GPU process to /dev/dri/card1 and the PowerVR ioctl handler, as demonstrated by PVRSRVBridgeSyncPrimOpCreate.Enginsight
Vendor | Product | Version |
---|---|---|
chrome_os | 𝑥 < r74-11895.b | |
chrome_os | r75 ≤ 𝑥 < r75.12105.b | |
chrome_os | r76 ≤ 𝑥 < r76.12208.0.0 |
𝑥
= Vulnerable software versions