CVE-2024-3655: Mali GPU Kernel Driver allows improper GPU memory processing operations
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r43p0 through r49p0; Valhall GPU Kernel Driver: from r43p0 through r49p0; Arm 5th Gen GPU Architecture Kernel Driver: from r43p0 through r49p0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3655?
CVE-2024-3655 is classified as a high-severity vulnerability due to its potential for unauthorized access to freed GPU memory.
How do I fix CVE-2024-3655?
To fix CVE-2024-3655, users should update their Android operating system to the latest version that includes the security patch for this vulnerability.
Who is affected by CVE-2024-3655?
CVE-2024-3655 affects local non-privileged users running Android on devices utilizing the Arm Bifrost and Valhall GPU drivers.
What type of vulnerability is CVE-2024-3655?
CVE-2024-3655 is a Use After Free vulnerability, which allows manipulation of freed GPU memory.
Can CVE-2024-3655 lead to further exploitation?
Yes, exploiting CVE-2024-3655 can lead to unauthorized access and potential control over GPU memory, which could be leveraged for further attacks.