CVE-2024-52939

High

Published: 22 February 2025

Published

22 February 2025

Modified

15 April 2026

KEV Added

—

Patch

—

CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0003 8.2th percentile

Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-52939 is a high-severity Use of Out-of-range Pointer Offset (CWE-823) vulnerability in Imaginationtech (inferred from references). Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 8.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-4 (Information in Shared System Resources) and SI-16 (Memory Protection).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068). What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

SI-2 Flaw Remediation good match

prevent

Flaw remediation directly addresses the vulnerability by applying patches to the kernel software and GPU firmware in guest VMs to prevent improper commands causing out-of-bounds writes.

SI-16 Memory Protection good match

prevent

Memory protection mechanisms such as address space layout randomization and data execution prevention mitigate exploitation of the out-of-bounds write in virtualized GPU memory.

SC-4 Information in Shared System Resources good match

prevent

Protection of information in shared system resources prevents unauthorized writes from guest VM GPU memory into areas outside its virtualized allocation, such as host or other guest memory.

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.

attack.mitre.org →

Why these techniques?

Local kernel memory corruption (out-of-bounds write) in guest VM enables exploitation for privilege escalation within the guest.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write data outside the Guest's virtualised GPU memory.

Deeper analysisAI

CVE-2024-52939 is a vulnerability in which kernel software installed and running inside a Guest VM posts improper commands to the GPU Firmware, triggering a write outside the Guest's virtualized GPU memory. It affects kernel software interacting with virtualized GPU components, as indicated by advisories from Imagination Technologies. The issue carries a CVSS v3.1 base score of 7.8 (High) and is associated with CWE-823 (Access of Uninitialized Pointer). The CVE was published on 2025-02-22T15:15:10.633.

A local attacker with low privileges (PR:L) inside the Guest VM can exploit this vulnerability with low attack complexity (AC:L) and local access (AV:L), requiring no user interaction (UI:N). Exploitation allows high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) within an unchanged scope (S:U), potentially due to the out-of-bounds write affecting memory beyond the Guest's virtualized GPU allocation.

Mitigation details are provided in the vendor advisory at https://www.imaginationtech.com/gpu-driver-vulnerabilities/.