CVE-2023-4295 Mali GPU Kernel Driver allows improper GPU memory processing operations

2023-11-0715:42:15

CWE-190

CWE-416

Arm

www.cve.org

cve-2023-4295

mali gpu

kernel driver

memory processing

EPSS

0.001

Percentile

20.0%

JSON

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Valhall GPU Kernel Driver",
    "vendor": "Arm Ltd",
    "versions": [
      {
        "changes": [
          {
            "at": "r43p0",
            "status": "unaffected"
          }
        ],
        "lessThan": "r43p0",
        "status": "affected",
        "version": "r29p0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Arm 5th Gen GPU Architecture Kernel  Driver",
    "vendor": "Arm Ltd",
    "versions": [
      {
        "changes": [
          {
            "at": "r43p0",
            "status": "unaffected"
          }
        ],
        "lessThan": "r43p0",
        "status": "affected",
        "version": "r41p0",
        "versionType": "patch"
      }
    ]
  }
]