Mali GPU Userspace Driver can make an Out-of-Bounds access (Arm Ltd Midgard GPU Userspace Driver)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.25 % · percentile 17 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Arm
- NVD status
- Modified
Description
Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from r19p0 through r44p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r44p0.
Weaknesses (CWE)
- CWE-787 — Out-of-bounds Write
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-37025
- GCVE · GCVE-0-2023-32804
CERT-FR advisories
- CERTFR-2023-AVI-0995 — Multiples vulnérabilités dans Google Android · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*≥ r41p0 ≤ r44p0cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r0p0 ≤ r44p0cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r0p0 ≤ r32p0cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r19p0 ≤ r44p0
Affected products
| Product | Versions |
|---|---|
| Arm Ltd · Midgard GPU Userspace Driver | affected r0p0 ≤ r32p0 |
| Arm Ltd · Bifrost GPU Userspace Driver | affected r0p0 ≤ r44p0 |
| Arm Ltd · Valhall GPU Userspace Driver | affected r19p0 ≤ r44p0 |
| Arm Ltd · Arm 5th Gen GPU Architecture Userspace Driver | affected r41p0 ≤ r44p0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |