Vulnerabilities > CVE-2023-32804 - Out-of-bounds Write vulnerability in ARM products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

arm

CWE-787

NVD

Published: 2023-12-04

Updated: 2023-12-07

Summary

Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from r19p0 through r44p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r44p0.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Midgard GPU Kernel Driver R0P0 ARM Midgard GPU Kernel Driver R4P0 ARM Midgard GPU Kernel Driver R8P0 ARM Midgard GPU Kernel Driver R26P0 ARM Midgard GPU Kernel Driver R29P0 ARM Midgard GPU Kernel Driver R30P0 ARM Midgard GPU Kernel Driver R31P0 ARM Midgard GPU Kernel Driver R32P0 ARM 5TH GEN GPU Architecture Kernel Driver R41P0 ARM 5TH GEN GPU Architecture Kernel Driver R42P0 ARM 5TH GEN GPU Architecture Kernel Driver R43P0 ARM 5TH GEN GPU Architecture Kernel Driver R44P0 ARM Bifrost GPU Kernel Driver R0P0 ARM Bifrost GPU Kernel Driver R17P0 ARM Bifrost GPU Kernel Driver R34P0 ARM Bifrost GPU Kernel Driver R38P1 ARM Bifrost GPU Kernel Driver R38P2 ARM Bifrost GPU Kernel Driver R39P0 ARM Bifrost GPU Kernel Driver R40P0 ARM Bifrost GPU Kernel Driver R41P0 ARM Bifrost GPU Kernel Driver R42P0 ARM Bifrost GPU Kernel Driver R43P0 ARM Bifrost GPU Kernel Driver R44P0 ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R38P0 ARM Valhall GPU Kernel Driver R38P1 ARM Valhall GPU Kernel Driver R38P2 ARM Valhall GPU Kernel Driver R39P0 ARM Valhall GPU Kernel Driver R40P0 ARM Valhall GPU Kernel Driver R41P0 ARM Valhall GPU Kernel Driver R42P0 ARM Valhall GPU Kernel Driver R43P0 ARM Valhall GPU Kernel Driver R44P0	35

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities