CVE-2019-16508

Name of the Vulnerable Software and Affected Versions Imagination Technologies driver for Chrome OS versions prior to R74-11895.B Imagination Technologies driver for Chrome OS versions prior to R75-12105.B Imagination Technologies driver for Chrome OS versions prior to R76-12208.0.0

Description The issue allows attackers to trigger an Integer Overflow and gain privileges via a malicious application. This occurs because of intentional access for the GPU process to /dev/dri/card1 and the PowerVR ioctl handler.

Recommendations For versions prior to R74-11895.B, update to R74-11895.B or later. For versions prior to R75-12105.B, update to R75-12105.B or later. For versions prior to R76-12208.0.0, update to R76-12208.0.0 or later.