CVE-2022-46396 — Improper Restriction of Operations within the Bounds of a Memory Buffer in ARM Valhall GPU Kernel Driver

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.2%
top 61.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
ARM Valhall GPU Kernel DriverARM Avalon GPU Kernel DriverGoogle Android
Timeline
PublishedApr 11
Latest updateMay 1

Description

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages3 packages

▶NVDarm/valhall_gpu_kernel_driverr29p0 — r41p0

🔴Vulnerability Details

1
GHSA
GHSA-qvhf-g7h8-w3gj: An issue was discovered in the Arm Mali Kernel Driver↗2023-04-11
▶

📋Vendor Advisories

1
Android
CVE-2022-46396: Mali↗2023-05-01
▶