CVE-2024-52936

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data outside the Guest's virtualised GPU memory.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-823

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-529376.7Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's viCVE-2024-529387.8Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities CVE-2024-529397.8Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write data outside the GCVE-2024-52946.5D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackeCVE-2024-529407.5AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network trafficCVE-2024-529415.4An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated remote attacker to injeCVE-2024-529425.4An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to injeCVE-2024-529435.4An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to injeCVE-2024-529445.4An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to injeCVE-2024-529457.8An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. ICVE-2024-529468.8An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise theirCVE-2024-529475.4A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via