CVE-2023-5249CWE-416

Mali GPU Kernel Driver allows improper GPU memory processing operations

High · published February 5, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-416 · Use After Free
Published
2024-02-05T10:01Z
EPSS history
Timeline
  • 05 FEB 10:01Z
    Mali GPU Kernel Driver allows improper GPU memory processing operations
    cvelistv5