CVE-2023-4969: GPU kernel implementations susceptible to memory leak
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called local memory on various architectures.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-4969?
The severity of CVE-2023-4969 is classified as high due to the potential for sensitive data exposure between GPU kernels.
How do I fix CVE-2023-4969?
Fixing CVE-2023-4969 typically involves updating the affected GPU drivers from vendors like Apple, Qualcomm, and AMD.
What types of software are affected by CVE-2023-4969?
CVE-2023-4969 affects GPU drivers from vendors such as Apple, Qualcomm, AMD, and Imagination, as well as implementations of OpenCL and Vulkan APIs.
What kind of data can be leaked due to CVE-2023-4969?
CVE-2023-4969 allows sensitive data from one GPU kernel to be read by another, which may include user data from different applications or contexts.
Is CVE-2023-4969 likely to be exploited?
Given the high severity and the nature of the vulnerability, CVE-2023-4969 is likely to be targeted by attackers looking to exploit GPU memory handling.