We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-4272

Mali GPU Kernel Driver exposes sensitive data from freed memory



AssignerArm
Reserved2023-08-09
Published2023-11-07
Updated2024-09-04

Description

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Problem types

CWE-1251 Mirrored Regions with Different Values

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
0x4002ab4380

r8p0
affected

Default status
0x4002ab43d0

r0p0 before r42p0
affected

Default status
0x4002ab4420

r19p0 before r42p0
affected

Default status
0x4002ab4470

r41p0 before r42p0
affected

Credits

Jann Horn at Google 0x4002ab44c0

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

cve.org CVE-2023-4272

nvd.nist.gov CVE-2023-4272

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-4272
Subscribe to our newsletter to learn more about our work.

© Copyright 2024 THREATINT
Made in Cyprus with ❤ + ☼
 System status
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
Error loading Crisp.chat. Please check your web content filter and browser plugins.