CVE-2023-44216

EUVD-2023-48575
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
canonicalubuntu_linux
22.04
amdryzen_7_4800u
-
intelcore_i7-10510u
-
intelcore_i7-12700k
-
intelcore_i7-8700
-
microsoftwindows_11
-
intelcore_i7-10610u
-
microsoftwindows_11
-
intelcore_i7-11800h
-
nvidiageforce_rtx_3060
-
microsoftwindows_10
-
amdryzen_5_7600x
-
nvidiageforce_rtx_2080_super
-
applemacos
13.1
applem1_mac_mini
-
googleandroid
13.0
googlepixel_6
-
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nvidia-graphics-drivers-304
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
ignored
nvidia-graphics-drivers-304-updates
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-340
bionic
not-affected
focal
ignored
jammy
not-affected
lunar
not-affected
mantic
not-affected
noble
dne
trusty
ignored
xenial
ignored
nvidia-graphics-drivers-340-updates
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-352
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-352-updates
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-361
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
not-affected
nvidia-graphics-drivers-367
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-375
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-384
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
ignored
xenial
not-affected
nvidia-graphics-drivers-390
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-418-server
bionic
not-affected
focal
ignored
jammy
ignored
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-430
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-435
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-440
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-440-server
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-450
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-450-server
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-455
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-460
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-460-server
bionic
not-affected
focal
ignored
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-470
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
nvidia-graphics-drivers-470-server
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
nvidia-graphics-drivers-495
bionic
not-affected
focal
not-affected
jammy
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-510
bionic
not-affected
focal
ignored
jammy
ignored
lunar
ignored
mantic
ignored
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-510-server
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-515
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-515-server
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-520
bionic
not-affected
focal
ignored
jammy
ignored
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-525
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
nvidia-graphics-drivers-525-server
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
nvidia-graphics-drivers-530
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
dne
trusty
dne
xenial
dne
nvidia-graphics-drivers-535
bionic
ignored
focal
not-affected
jammy
not-affected
lunar
ignored
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
Common Weakness Enumeration
References
https://arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/
https://blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/
https://blog.imaginationtech.com/reducing-bandwidth-pvric/
https://github.com/UT-Security/gpu-zip
https://news.ycombinator.com/item?id=37663159
https://www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/
https://www.hertzbleed.com/gpu.zip/
https://www.hertzbleed.com/gpu.zip/GPU-zip.pdf
https://www.w3.org/TR/filter-effects-1/
https://arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/
https://blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/
https://blog.imaginationtech.com/reducing-bandwidth-pvric/
https://github.com/UT-Security/gpu-zip
https://news.ycombinator.com/item?id=37663159
https://www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/
https://www.hertzbleed.com/gpu.zip/
https://www.hertzbleed.com/gpu.zip/GPU-zip.pdf
https://www.w3.org/TR/filter-effects-1/