PT-2023-28274 · Arm · Arm Mali Gpu Kernel Driver

Published 2023-08-26 · Updated 2024-11-29 · CVE-2023-4211

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions (affected versions not specified)

Description A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. The issue is currently under active exploitation in targeted attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-294605494

CVE-2023-4211

Affected Products

Arm Mali Gpu Kernel Driver

References · 39

• https://osv.dev/vulnerability/CVE-2023-4211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4211 · Security Note
• https://twitter.com/FatmaYl32625315/status/1709158211255718196 · Twitter Post
• https://twitter.com/cipherstorm/status/1709175129211879882 · Twitter Post
• https://twitter.com/MishaalRahman/status/1703834857426551245 · Twitter Post
• https://twitter.com/Vulnraiders_Sec/status/1709075698181136416 · Twitter Post
• https://twitter.com/immuniweb/status/1709201835712524458 · Twitter Post
• https://twitter.com/ka0com/status/1709410541838459244 · Twitter Post
• https://t.me/true_secator/4922 · Telegram Post
• https://twitter.com/ruedigerp/status/1709080854142615988 · Twitter Post
• https://twitter.com/shah_sheikh/status/1709164919881621593 · Twitter Post
• https://twitter.com/TheHackersNews/status/1709071771519824335 · Twitter Post
• https://t.me/cybersecuritytechnologies/9447 · Telegram Post
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Security Note, Vendor Advisory
• https://t.me/cvenotify/102704 · Telegram Post