CVE-2023-4295: A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

PriorityP339high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.25%

16.3th percentile

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
arm	mali_gpu_kernel_driver	>= r41p0 < r43p0	r43p0
arm	valhall_gpu_kernel_driver	r29p0 – r42p0	—
arm_ltd	arm_5th_gen_gpu_architecture_kernel_driver	>= r41p0 < r43p0	r43p0
arm_ltd	valhall_gpu_kernel_driver	>= r29p0 < r43p0	r43p0
google	android	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.