CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module

Low · published April 11, 2023

CVSS v3.1
3.3
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Published
2023-04-11T00:00Z
EPSS history
Timeline
  • 11 APR 00:00Z
    An issue was discovered in the Arm Android Gralloc Module
    cvelistv5