Description
Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Recommended action
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
CISA remediation due date for U.S. federal agencies: 26 Dec 2023.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.