Firetruck

CVE-2023-4211

KEV

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

View CVE record →
Vendor / Project
Arm
Product
Mali GPU Kernel Driver
Date added
Oct 3, 2023
Due date
Oct 24, 2023
Known ransomware use
Unknown
CWEs
CWE-416

Description

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes