CVE-2023-3889 — Mali GPU Kernel Driver exposes sensitive data from freed memory

CVE-2023-3889

Mali GPU Kernel Driver exposes sensitive data from freed memory PUBLISHED

Description (CNA)

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.

Affected (CNA)

Vendor / product	Versions
Arm Ltd / Valhall GPU Kernel Driver	affected r38p0 through r44p0

CWE

CWE-119, CWE-667

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.