Authored by Jann Horn, Google Security Research

PowerVR has an issue where wrapping addition in _DevmemXReservationPageAddress() causes an MMU operation at the wrong address.

advisories | CVE-2024-34748