CVE-2023-48409

In gpupixelhandlebufferlivenessupdateioctl of private/google-modules/gpu/malikbase/malikbasecorelinux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVE-2023-48409

creationtimestamp| type| source ---|---|--- 2023-12-31 14:11:22+00:00| seen| https://t.me/ctinow/161089 2024-10-21 15:07:32+00:00| seen| MISP/5248edde-cd09-4b70-8888-fec33ea1fb93 2025-08-07 10:35:06+00:00| seen| https://bsky.app/profile/0xor0ne.bsky.social/post/3lvsk352tjs2r...

CVE-2023-48409

Summary: CVE-2023-48409 affects the Mali KBase GPU kernel module on Google Pixel devices. The vulnerability is described as a possible out-of-bounds write triggered by an integer overflow in the function gpu_pixel_handle_buffer_liveness_update_ioctl within private/google-modules/gpu/mali_kbase/ma...