CVE-2023-4295: Mali GPU Kernel Driver allows improper GPU memory processing operations
Published Nov 7, 2023
·Updated
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Affected Software
3 affected components
Google Android
Arm Mali GPU Kernel Driver>=r41p0<r43p0
Arm Valhall GPU Kernel Driver>=r29p0<=r42p0
Remediation
Information
This issue is fixed in Valhall and Arm 5th Gen GPU Architecture Kernel
Driver r43p0. Users are recommended to upgrade if they are impacted by
this issue.
Event History
Nov 7, 2023
CVE Published
via MITRE·03:42 PM
Data Sourced
via MITRE·03:42 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-4295?
CVE-2023-4295 is a vulnerability in the Mali GPU Kernel Driver that allows improper GPU memory processing operations.
2
Who is affected by CVE-2023-4295?
The vulnerability affects local non-privileged users.
3
What can an attacker do with CVE-2023-4295?
An attacker can gain access to already freed memory.
4
What is the severity of CVE-2023-4295?
The severity of CVE-2023-4295 is high with a CVSS score of 7.8.
5
How can I fix CVE-2023-4295?
To fix CVE-2023-4295, it is recommended to apply the necessary security patches provided by Arm.