CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-04-06
ARM Mali GPU Kernel Driver Memory Leak and Information Disclosure Vulnerability (CVE-2023-26083) Technical Advisory
[Affected Scope] ARM Mali GPU Kernel Drivers (Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, Avalon r41p0-r42p0)
[Impact] A local non-privileged user can perform valid GPU processing operations to expose sensitive kernel metadata, facilitating KASLR bypass and local privilege escalation (LPE)
[Mitigation] Apply official security patches from chipset vendors and OEMs, and immediately upgrade device firmware to the latest version