Medium severity5.3NVD Advisory· Published Sep 27, 2023· Updated Jun 17, 2026
CVE-2023-44216
CVE-2023-44216
Description
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19- cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:ryzen_7_4800u:-:*:*:*:*:*:*:*
- cpe:2.3:h:apple:m1_mac_mini:-:*:*:*:*:*:*:*
- cpe:2.3:h:intel:core_i7-10510u:-:*:*:*:*:*:*:*
- cpe:2.3:h:intel:core_i7-10610u:-:*:*:*:*:*:*:*
- cpe:2.3:h:intel:core_i7-11800h:-:*:*:*:*:*:*:*
- cpe:2.3:h:intel:core_i7-12700k:-:*:*:*:*:*:*:*
- cpe:2.3:h:intel:core_i7-8700:-:*:*:*:*:*:*:*
- cpe:2.3:h:nvidia:geforce_rtx_2080_super:-:*:*:*:*:*:*:*
- cpe:2.3:h:nvidia:geforce_rtx_3060:-:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:13.1:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:pro:*:*:*
cpe:2.3:o:microsoft:windows_11:-:*:*:*:home:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_11:-:*:*:*:home:*:*:*
- cpe:2.3:o:microsoft:windows_11:-:*:*:*:professional:*:*:*
- Imagination/PowerVR Image Compressiondescription
Patches
Vulnerability mechanics
References
8- www.hertzbleed.com/gpu.zip/GPU-zip.pdfnvdExploit
- www.w3.org/TR/filter-effects-1/nvdExploit
- arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/nvdPress/Media CoverageThird Party Advisory
- blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/nvdPress/Media Coverage
- blog.imaginationtech.com/reducing-bandwidth-pvric/nvdPress/Media Coverage
- news.ycombinator.com/itemnvdIssue Tracking
- www.bleepingcomputer.com/news/security/modern-gpus-vulnerable-to-new-gpuzip-side-channel-attack/nvdPress/Media Coverage
- www.hertzbleed.com/gpu.zip/nvdTechnical Description
News mentions
0No linked articles in our index yet.