← All advisories

High severity7.8NVD Advisory· Published Nov 7, 2023· Updated Jun 17, 2026

CVE-2023-4295

CVE-2023-4295

Description

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Arm/Mali GPU Kernel Driver2 versions
cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:*range: >=r41p0,<r43p0
- (no CPE)
Arm/Valhall GPU Kernel Driver
cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*
Range: >=r29p0,<=r42p0
Arm Ltd/Valhall GPU Kernel Drivercpe-rescue
Range: r29p0
Arm Ltd/Arm 5th Gen GPU Architecture Kernel Drivercpe-rescue
Range: r41p0

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/176109/Arm-Mali-CSF-Overflow-Use-After-Free.htmlnvdThird Party Advisory
developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20VulnerabilitiesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.