Low severity3.3NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-22808

Description

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Avalon Android Gralloc Module
cpe:2.3:a:arm:avalon_android_gralloc_module:r41p0:*:*:*:*:*:*:*
Arm/Bifrost Android Gralloc Module
cpe:2.3:a:arm:bifrost_android_gralloc_module:*:*:*:*:*:*:*:*
Range: >=r24p0,<=r41p0
Arm/Valhall Android Gralloc Module
cpe:2.3:a:arm:valhall_android_gralloc_module:*:*:*:*:*:*:*:*
Range: >=r24p0,<=r41p0
Arm/Android Gralloc Moduledescription
Arm/Avalonllm-create
Range: r41p0 before r42p0
Arm/Bifrostllm-fuzzy
Range: r24p0-r41p0 before r42p0
Arm/Valhallllm-fuzzy
Range: r24p0-r41p0 before r42p0
Arm/Android Gralloc Modulellm-fuzzy

Patches

Vulnerability mechanics

References

developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20VulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000