CVE-2023-4272
published 2023-11-07CVE-2023-4272: A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.34%
25.8th percentile
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arm | bifrost_gpu_kernel_driver | r0p0 – r41p0 | — |
| arm | mali_gpu_kernel_driver | — | — |
| arm | midgard_gpu_kernel_driver | r8p0 – r32p0 | — |
| arm | valhall_gpu_kernel_driver | r19p0 – r41p0 | — |
| arm_ltd | arm_5th_gen_gpu_architecture_kernel_driver | >= r41p0 < r42p0 | r42p0 |
| arm_ltd | bifrost_gpu_kernel_driver | >= r0p0 < r42p0 | r42p0 |
| arm_ltd | midgard_gpu_kernel_driver | r8p0 – r32p0 | — |
| arm_ltd | valhall_gpu_kernel_driver | >= r19p0 < r42p0 | r42p0 |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2023-4272: Mali
vendor_android·2023-12-01·CVSS 5.5
CVE-2023-4272 [MEDIUM] CVE-2023-4272: Mali
Android Security Bulletin 2023-12-01
CVE: CVE-2023-4272
Severity: HIGH
Component: Mali
References: A-296910715
*
GHSA
GHSA-gh94-rfj3-873r: A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory
ghsa_unreviewed·2023-11-14
CVE-2023-4272 [MEDIUM] CWE-1251 GHSA-gh94-rfj3-873r: A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-11-07
Published