Vulnerability · Published Jul 1, 2024 · Assigned by Arm
CVE-2024-0153Mali GPU Firmware allows improper GPU processing operations
High 7.8
In plain English
A high-severity memory corruption in Arm 5th Gen GPU Architecture Firmware from Arm Ltd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Official description
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If the operations are carefully prepared, then this in turn could give them access to all system memory. This issue affects Valhall GPU Firmware: from r29p0 through r46p0; Arm 5th Gen GPU Architecture Firmware: from r41p0 through r46p0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arm Ltd | Valhall GPU Firmware | r29p0 – through r46p0 |
| Arm Ltd | Arm 5th Gen GPU Architecture Firmware | r41p0 – through r46p0 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H