CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-42115.5/MEDIUMEPSS 1.0%CISA KEV
2023-10-01

ARM Mali GPU Driver Use-After-Free Vulnerability (CVE-2023-4211) Analysis and Mitigation Guide

[Affected Scope] Android and embedded devices utilizing ARM Mali GPU Midgard, Bifrost, Valhall, and 5th Gen architecture drivers

[Impact] A local non-privileged user can exploit improper GPU memory processing operations to access freed memory (Use-After-Free), potentially leading to local privilege escalation and sensitive kernel data exposure

[Mitigation] Apply the latest security patches and kernel driver updates provided by chipset vendors and device OEMs immediately

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse