Arm Mali GPU Kernel Driver vulnerabilities

4 CVEs affecting Arm Mali GPU Kernel Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4295, published 2023-11-07.

More from Arm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-4272, published 2023-11-07. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
• CVE-2023-4295, published 2023-11-07. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
• CVE-2023-34970, published 2023-10-03. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is…
• CVE-2023-33200, published 2023-10-03. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give…