Mali Gpu Kernel Driver
CVE-2023-4295
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
AnalysisAI
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. Affected products include: Arm Mali Gpu Kernel Driver, Arm Valhall Gpu Kernel Driver.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.
More in Mali Gpu Kernel Driver
View allA local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bou
A local non-privileged user can make improper GPU processing operations to exploit a software race condition. Rated medi
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Integer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today