CVE-2024-0153 is a high-severity memory buffer vulnerability affecting Arm Valhall and 5th Gen GPU Architecture Firmware versions. A local, non-privileged user can exploit this flaw by crafting specific GPU processing operations to access memory outside of intended buffer bounds, potentially leading to full system memory access. With a CVSS score of 7.8, the attack requires low complexity and no user interaction, posing a significant risk of confidentiality, integrity, and availability compromise. Currently, there is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= r41p0, < r47p0CPE matchmatch criteria | cpe:2.3:o:arm:5th_gen_gpu_architecture_firmware:*:*:*:*:*:*:*:* | ||
>= r29p0, < r47p0CPE matchmatch criteria | cpe:2.3:o:arm:valhall_gpu_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.