Arm and Qualcomm Hit by Multiple Zero
60
CVE-2023-34970
—CVSS 3.1
4.7 medium
EPSS
<1%p22
Published
()
Modified
Description
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory
- Vendors
- arm
- Products
- mali gpu kernel driver, valhall gpu kernel driver
- Weakness
- CWE-416, CWE-787
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news5 stories
Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation
60
60
Vulnerable Arm GPU drivers under active exploitation. Patches may not be available
60
35