CVE-2023-44216: Medium severity ubuntu vulnerability
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-44216.
What is the severity of CVE-2023-44216?
The severity of CVE-2023-44216 is medium with a CVSS score of 5.3.
Which software is affected by CVE-2023-44216?
The software affected by CVE-2023-44216 includes Canonical Ubuntu Linux 22.04, Microsoft Windows 10, Intel Core I7-10510u, Intel Core I7-8700, Microsoft Windows 11, Intel Core I7-10610u, Intel Core I7-11800h, Nvidia GeForce RTX 3060, Amd Ryzen 5 7600x, Nvidia GeForce RTX 2080 Super, Apple macOS 13.1, Google Android 13.0, Google Pixel 6.
What is PVRIC (PowerVR Image Compression)?
PVRIC (PowerVR Image Compression) is a software-transparent compression technique used on Imagination 2018 and later GPU devices.
What are the potential attacks enabled by CVE-2023-44216?
CVE-2023-44216 enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification.