CVE-2023-34970 is a medium-severity vulnerability affecting Arm Mali and Valhall GPU kernel drivers, allowing a local non-privileged user to trigger out-of-bounds access or a race condition. This could lead to a denial of service, or potentially access to freed memory if the system is carefully prepared. Although no public exploit code exists, Arm has released patches to address this flaw, which has been reportedly exploited in targeted attacks. The vulnerability has garnered significant community and media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
r44p0CPE matchmatch criteria | cpe:2.3:a:arm:mali_gpu_kernel_driver:r44p0:*:*:*:*:*:*:* | ||
r44p0CPE matchmatch criteria | cpe:2.3:a:arm:valhall_gpu_kernel_driver:r44p0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.