Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-4272

Mali GPU Kernel Driver exposes sensitive data from freed memory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arm

Description

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arm Ltd Midgard GPU Kernel Driver

Default version status: unaffected

  • r8p0 to ≤ r32p0affected

Arm Ltd Bifrost GPU Kernel Driver

Default version status: unaffected

  • r0p0 to < r42p0affected

Arm Ltd Valhall GPU Kernel Driver

Default version status: unaffected

  • r19p0 to < r42p0affected

Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver

Default version status: unaffected

  • r41p0 to < r42p0affected

References