Vulnerability · Published Dec 4, 2023 · Assigned by Arm
CVE-2023-32804Mali GPU Userspace Driver can make an Out-of-Bounds access
High 7.8
In plain English
A high-severity out-of-bounds write in Arm 5th Gen GPU Architecture Userspace Driver from Arm Ltd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Official description
Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from r19p0 through r44p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r44p0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arm Ltd | Midgard GPU Userspace Driver | r0p0 – through r32p0 |
| Arm Ltd | Bifrost GPU Userspace Driver | r0p0 – through r44p0 |
| Arm Ltd | Valhall GPU Userspace Driver | r19p0 – through r44p0 |
| Arm Ltd | Arm 5th Gen GPU Architecture Userspace Driver | r41p0 – through r44p0 |
Weakness: CWE-787