cve/2023/CVE-2023-4969.md

### [CVE-2023-4969](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4969)
![](https://img.shields.io/static/v1?label=Product&message=OpenCL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Vulkan&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.3.224%3C%3D%201.3.224%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=3.0.11%3C%3D%203.0.11%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-119%20Improper%20Restriction%20of%20Operations%20within%20the%20Bounds%20of%20a%20Memory%20Buffer&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor&color=brighgreen)

### Description

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.

### POC

#### Reference
- https://blog.trailofbits.com
- https://kb.cert.org/vuls/id/446598
- https://www.kb.cert.org/vuls/id/446598

#### Github
- https://github.com/trailofbits/publications