Exploit / PoCcritical
Zero-day in Arm GPU drivers exploited in targeted attacks (CVE-2023-4211)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-22706 | Unprivileged Memory-Write Flaw in Arm Mali GPU Kernel Drivers | 7.8 | 1% | KEV | KEV |
| CVE-2023-26083 | Memory Leak Information Disclosure in Arm Mali GPU Kernel Drivers | 3.3 | 1% | KEV | KEV |
| CVE-2023-33200 | A local non-privileged user can make improper GPU processing operations to exploit a software race condition | 4.7 | <1% | ||
| CVE-2023-34970 | A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race… | 4.7 | <1% | ||
| CVE-2023-4211 | Use-After-Free in Arm Mali GPU Kernel Driver (Actively Exploited) | 5.5 | 1% | KEV | KEV |
From the original article
1 min read at helpnetsecurity.com
A vulnerability (CVE-2023-4211) in the kernel drivers for several Mali GPUs “may be under limited, targeted exploitation,” British semiconductor manufacturer Arm has confirmed on Monday, when it released drivers updated with patches. Arm’s Mali GPUs are used on a variety devices, most prominently on Android phones by Google, Samsung, Huawei, Nokia, Xiaomi, Oppo, and other manufacturers.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.