CVE-2023-4295 is a high-severity vulnerability affecting Arm Mali and Valhall GPU kernel drivers, allowing a local non-privileged user to access freed memory due to improper GPU memory processing. With a CVSS score of 7.8, this vulnerability presents a significant risk (C:H/I:H/A:H) due to its low attack complexity and the potential for complete compromise of confidentiality, integrity, and availability. While the vulnerability is not currently listed on the KEV catalog and lacks public exploit code or significant community discussion, its high FAUCET Risk Score of 58/100 indicates a notable threat that should be addressed.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= r41p0, < r43p0CPE matchmatch criteria | cpe:2.3:a:arm:mali_gpu_kernel_driver:*:*:*:*:*:*:*:* | ||
>= r29p0, <= r42p0CPE matchmatch criteria | cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.