Mali GPU Kernel Driver exposes sensitive data from freed memory
CVE-2023-4272

5.5MEDIUM

Key Information:

Vendor: Arm Ltd
Status: Midgard Gpu Kernel Driver; Bifrost Gpu Kernel Driver; Valhall Gpu Kernel Driver; Arm 5th Gen Gpu Architecture Kernel Driver
Vendor: CVE Published:; 7 November 2023

What is CVE-2023-4272?

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.

Arm 5th Gen GPU Architecture Kernel Driver r41p0

Bifrost GPU Kernel Driver r0p0

Midgard GPU Kernel Driver r8p0

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Jann Horn at Google