CVE-2024-47899

High

Published: 31 January 2025

Published

31 January 2025

Modified

15 April 2026

KEV Added

—

Patch

—

CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0012 31.1th percentile

Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-47899 is a high-severity Use After Free (CWE-416) vulnerability in Imaginationtech (inferred from references). Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 31.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 CM-11 (User-installed Software) and CM-7 (Least Functionality).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

SI-2 Flaw Remediation good match

prevent

Directly remediates the use-after-free vulnerability in Imagination Technologies GPU drivers by requiring timely patching and flaw correction.

CM-11 User-installed Software good match

prevent

Prevents non-privileged users from installing software that issues improper GPU system calls, blocking the primary exploitation vector.

CM-7 Least Functionality good match

prevent

Restricts GPU driver functionality to essential capabilities only, prohibiting non-essential features that enable triggering kernel exceptions via improper calls.

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.

attack.mitre.org →

T1499.004 Application or System Exploitation Impact

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

attack.mitre.org →

Why these techniques?

Local use-after-free in GPU kernel driver directly enables privilege escalation via exploitation (T1068) and kernel-crash DoS (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

Deeper analysisAI

CVE-2024-47899 is a use-after-free (CWE-416) vulnerability in GPU drivers developed by Imagination Technologies. It arises when software installed and executed as a non-privileged user issues improper GPU system calls, triggering kernel exceptions. The vulnerability carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high impact on confidentiality, integrity, and availability within a local scope.

A local attacker with low privileges, such as a non-privileged user on the system, can exploit this flaw with low complexity and no user interaction required. Successful exploitation allows the attacker to trigger use-after-free conditions in the kernel, potentially leading to arbitrary code execution, privilege escalation, or system denial of service through kernel crashes.

Imagination Technologies has published details on mitigations in their GPU driver vulnerabilities advisory at https://www.imaginationtech.com/gpu-driver-vulnerabilities/, which security practitioners should consult for patch availability, updated driver versions, and recommended remediation steps.