Lucene search
HistoryNov 07, 2023 - 4:15 p.m.
CVE-2023-4295
local user
improper operations
gpu memory
access
freed memory
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Affected configurations
Node
armmali_gpu_kernel_driverRanger41p0–r43p0
ORarmvalhall_gpu_kernel_driverRanger29p0–r42p0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arm | mali_gpu_kernel_driver | * | cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:* |
| arm | valhall_gpu_kernel_driver | * | cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-4295
2023-11-07 16:15:29
prion
prion
Design/Logic Flaw
2023-11-07 16:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2023-4295