CVE-2023-4272

Published: Nov 7, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Affected (4)

Products: Arm: Bifrost Gpu Kernel Driver, Mali Gpu Kernel Driver, Midgard Gpu Kernel Driver, Valhall Gpu Kernel Driver

4 products

Bifrost Gpu Kernel Driver

Mali Gpu Kernel Driver

Midgard Gpu Kernel Driver

Valhall Gpu Kernel Driver

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Arm Bifrost Gpu Kernel Driver	r0p0 ≤ version ≤ r41p0
Arm Mali Gpu Kernel Driver	Version r41p0
Arm Midgard Gpu Kernel Driver	r8p0 ≤ version ≤ r32p0
Arm Valhall Gpu Kernel Driver	r19p0 ≤ version ≤ r41p0

Related CWEs

Mirrored Regions with Different Values

The product's architecture mirrors regions without ensuring that their contents always stay in sync.

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Source: arm-security@arm.com

Vendor Advisory

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.