CWE Code: 190
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Integer Overflow or Wraparound
Summary: the imagination technologies driver for chrome os before r74-11895.b, r75 before r75-12105.b, and r76 before r76-12208.0.0 allows attackers to trigger an integer overflow and gain privileges via a malicious application. this occurs because of intentional access for the gpu process to /dev/dri/card1 and the powervr ioctl handler, as demonstrated by pvrsrvbridgesyncprimopcreate.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-10-01
Last Modified Date: 2019-10-08