CVE-2023-4969

GPU kernel implementations susceptible to memory leak

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.

Affected

Khronos Group · OpenCL · Vulkan

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

1.19% chance of exploitation in the next 30 days, 67th percentile

Published

2024-01-16

Updated

2025-06-20

Proof-of-concept exploits (1)

• https://blog.trailofbits.com

Security advisories

• https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html
• https://kb.cert.org/vuls/id/446598
• https://www.kb.cert.org/vuls/id/446598

References

• CVE Record
• NVD entry