CVE-2023-44216

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
VendorProductVersion
canonicalubuntu_linux
22.04
amdryzen_7_4800u
-
intelcore_i7-10510u
-
intelcore_i7-12700k
-
intelcore_i7-8700
-
microsoftwindows_11
-
intelcore_i7-10610u
-
microsoftwindows_11
-
intelcore_i7-11800h
-
nvidiageforce_rtx_3060
-
microsoftwindows_10
-
amdryzen_5_7600x
-
nvidiageforce_rtx_2080_super
-
applemacos
13.1
applem1_mac_mini
-
googleandroid
13.0
googlepixel_6
-
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nvidia-graphics-drivers-304
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
nvidia-graphics-drivers-304-updates
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-340
noble
dne
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
ignored
bionic
not-affected
xenial
ignored
trusty
ignored
nvidia-graphics-drivers-340-updates
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-352
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-352-updates
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-361
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
dne
nvidia-graphics-drivers-367
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-375
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-384
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
ignored
nvidia-graphics-drivers-390
noble
dne
mantic
dne
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-418-server
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-430
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-435
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-440
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-440-server
noble
dne
mantic
dne
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-450
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-450-server
noble
dne
mantic
dne
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-455
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-460
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-460-server
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-470
noble
not-affected
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-470-server
noble
not-affected
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-495
noble
dne
mantic
dne
lunar
dne
jammy
dne
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-510
noble
dne
mantic
ignored
lunar
ignored
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-510-server
noble
dne
mantic
dne
lunar
dne
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-515
noble
dne
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-515-server
noble
dne
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-520
noble
dne
mantic
dne
lunar
dne
jammy
ignored
focal
ignored
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-525
noble
not-affected
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-525-server
noble
not-affected
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-530
noble
dne
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
nvidia-graphics-drivers-535
noble
not-affected
mantic
not-affected
lunar
ignored
jammy
not-affected
focal
not-affected
bionic
ignored
xenial
dne
trusty
dne
Common Weakness Enumeration
References
https://arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/
https://blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/
https://blog.imaginationtech.com/reducing-bandwidth-pvric/
https://github.com/UT-Security/gpu-zip
https://news.ycombinator.com/item?id=37663159
https://www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/
https://www.hertzbleed.com/gpu.zip/
https://www.hertzbleed.com/gpu.zip/GPU-zip.pdf
https://www.w3.org/TR/filter-effects-1/
https://arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/
https://blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/
https://blog.imaginationtech.com/reducing-bandwidth-pvric/
https://github.com/UT-Security/gpu-zip
https://news.ycombinator.com/item?id=37663159
https://www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/
https://www.hertzbleed.com/gpu.zip/
https://www.hertzbleed.com/gpu.zip/GPU-zip.pdf
https://www.w3.org/TR/filter-effects-1/