Medium severity4.7NVD Advisory· Published Oct 3, 2023· Updated Jun 17, 2026

CVE-2023-33200

Description

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Bifrost GPU Kernel Driver
cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*
Range: >=r17p0,<r44p1
Arm/Mali GPU Kernel Driver2 versions
cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:*range: >=r41p0,<r44p1
- (no CPE)
Arm/Valhall GPU Kernel Driver
cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*
Range: >=r19p0,<r44p1
Arm Ltd/Bifrost GPU Kernel Drivercpe-rescue
Range: r17p0
Arm Ltd/Valhall GPU Kernel Drivercpe-rescue
Range: r19p0
Arm Ltd/Arm 5th Gen GPU Architecture Kernel Drivercpe-rescue
Range: r41p0

Patches

Vulnerability mechanics

References

developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20VulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000