CVE-2023-34970 — Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

Description (CNA)

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory

Affected (CNA)

Vendor / product	Versions
Arm Ltd / Valhall GPU Kernel Driver	affected r44p0 before r44p1
Arm Ltd / Arm 5th Gen GPU Architecture Kernel Driver	affected r41p0 before r44p1

CWE

CWE-416

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.