CVE-2023-4211
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
Yes
*KEV
Decision
-
*SSVC
Descriptions
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Un usuario local sin privilegios puede realizar operaciones inadecuadas de procesamiento de la memoria de la GPU para obtener acceso a la memoria ya liberada.
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
*Credits:
Maddie Stone, Google Threat Analysis Group , Jann Horn, Google Project Zero
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-08-07 CVE Reserved
- 2023-10-01 CVE Published
- 2023-10-03 Exploited in Wild
- 2023-10-24 KEV Due Date
- 2024-08-02 CVE Updated
- 2024-11-27 EPSS Updated
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
- CAPEC-233: Privilege Escalation
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities | 2023-10-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arm Search vendor "Arm" | 5th Gen Gpu Architecture Kernel Driver Search vendor "Arm" for product "5th Gen Gpu Architecture Kernel Driver" | >= r41p0 <= r42p0 Search vendor "Arm" for product "5th Gen Gpu Architecture Kernel Driver" and version " >= r41p0 <= r42p0" | - |
Affected
| ||||||
| Arm Search vendor "Arm" | Bifrost Search vendor "Arm" for product "Bifrost" | >= r0p0 <= r42p0 Search vendor "Arm" for product "Bifrost" and version " >= r0p0 <= r42p0" | - |
Affected
| ||||||
| Arm Search vendor "Arm" | Midgard Search vendor "Arm" for product "Midgard" | >= r12p0 <= r32p0 Search vendor "Arm" for product "Midgard" and version " >= r12p0 <= r32p0" | - |
Affected
| ||||||
| Arm Search vendor "Arm" | Valhall Search vendor "Arm" for product "Valhall" | >= r19p0 <= r42p0 Search vendor "Arm" for product "Valhall" and version " >= r19p0 <= r42p0" | - |
Affected
| ||||||