CVE-2023-4969

MEDIUM 6.5CVE-2023-4969 · Published 16/01/2024 · updated 17/06/2026

In short

CVE-2023-4969 is a MEDIUM (CVSS 6.5) vulnerability affecting ddk (imaginationtech), opencl (khronos), vulkan (khronos).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ddk imaginationtech	`≤ 23.2`	No fix yet
opencl khronos	`≤ 3.0.11`	No fix yet
vulkan khronos	`≤ 1.3.224`	No fix yet

Description

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.

References

blog.trailofbits.com · Exploit
kb.cert.org/vuls/id/446598 · Third Party Advisory
registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html · Technical Description
registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html · Vendor Advisory
kb.cert.org/vuls/id/446598 · Third Party Advisory

More vulnerabilities in ddk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ddk

imaginationtech

≤ 23.2

No fix yet

opencl

khronos

≤ 3.0.11

No fix yet

vulkan

khronos

≤ 1.3.224

No fix yet

More vulnerabilities in ddk

See all →