Lucene search

K
nvd[email protected]NVD:CVE-2024-1395
HistoryMay 03, 2024 - 2:15 p.m.

CVE-2024-1395

2024-05-0314:15:10
CWE-416
web.nvd.nist.gov
3
arm ltd
gpu
architecture
kernel driver
use after free
vulnerability
memory
processing operations
improper
local
non-privileged user

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.0%

Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.
This issue affects Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-1395