CVE-2023-3889CWE-119CWE-667

Mali GPU Kernel Driver exposes sensitive data from freed memory

High · published November 7, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-667 · Improper Locking
Published
2023-11-07T15:28Z
EPSS history
Timeline
  • 07 NOV 15:28Z
    Mali GPU Kernel Driver exposes sensitive data from freed memory
    cvelistv5