CVE-2023-3889
published 2023-11-07CVE-2023-3889: A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.18%
8.1th percentile
A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arm | valhall_gpu_kernel_driver | r38p0 – r44p0 | — |
| arm_ltd | valhall_gpu_kernel_driver | r38p0 – r44p0 | — |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4qp7-687g-h58j: A local non-privileged user can make improper GPU memory processing operations
ghsa_unreviewed·2023-11-14
CVE-2023-3889 [HIGH] CWE-119 GHSA-4qp7-687g-h58j: A local non-privileged user can make improper GPU memory processing operations
A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.
Android
CVE-2023-3889: Mali
vendor_android·2023-12-01·CVSS 7.8
CVE-2023-3889 [HIGH] CVE-2023-3889: Mali
Android Security Bulletin 2023-12-01
CVE: CVE-2023-3889
Severity: HIGH
Component: Mali
References: A-295942985
*
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-11-07
Published