Mali GPU Userspace Driver can make an Out-of-Bounds access (Arm Ltd Midgard GPU Userspace Driver)
En bref
- Source
- NVD
- EPSS
- EPSS 0.25 % · centile 17 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Arm
- Statut NVD
- Modified
Rechercher sur…
Description
Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from r19p0 through r44p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r44p0.
Faiblesses (CWE)
- CWE-787 — Écriture hors limites
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-37025
- GCVE · GCVE-0-2023-32804
Avis du CERT-FR
- CERTFR-2023-AVI-0995 — Multiples vulnérabilités dans Google Android · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*≥ r41p0 ≤ r44p0cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r0p0 ≤ r44p0cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r0p0 ≤ r32p0cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*≥ r19p0 ≤ r44p0
Produits affectés
| Produit | Versions |
|---|---|
| Arm Ltd · Midgard GPU Userspace Driver | affected r0p0 ≤ r32p0 |
| Arm Ltd · Bifrost GPU Userspace Driver | affected r0p0 ≤ r44p0 |
| Arm Ltd · Valhall GPU Userspace Driver | affected r19p0 ≤ r44p0 |
| Arm Ltd · Arm 5th Gen GPU Architecture Userspace Driver | affected r41p0 ≤ r44p0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |