Log in Start free

Vulnerability · Published Sep 26, 2023 · Assigned by mitre

CVE-2023-44216

Medium 5.3

In plain English

A medium-severity security flaw in the nvidia-graphics-drivers-390 package (Ubuntu). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).

Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)1.7%top 22.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSnvidia-graphics-drivers-390no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-418-serverno fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-430no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-440no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-450no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-455no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-460no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-510no fix listedUBUNTU-CVE-2023-44216
Ubuntu:22.04:LTSnvidia-graphics-drivers-520no fix listedUBUNTU-CVE-2023-44216

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References