Vulnerabilities > CVE-2023-33200 - Use After Free vulnerability in ARM products

CVSS 4.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

high complexity

arm

CWE-416

NVD

Published: 2023-10-03

Updated: 2023-10-05

Summary

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Mali GPU Kernel Driver R41P0 ARM Mali GPU Kernel Driver R44P0 ARM Bifrost GPU Kernel Driver R17P0 ARM Bifrost GPU Kernel Driver R34P0 ARM Bifrost GPU Kernel Driver R38P1 ARM Bifrost GPU Kernel Driver R38P2 ARM Bifrost GPU Kernel Driver R39P0 ARM Bifrost GPU Kernel Driver R40P0 ARM Bifrost GPU Kernel Driver R41P0 ARM Bifrost GPU Kernel Driver R42P0 ARM Bifrost GPU Kernel Driver R43P0 ARM Bifrost GPU Kernel Driver R44P0 ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R38P0 ARM Valhall GPU Kernel Driver R38P1 ARM Valhall GPU Kernel Driver R38P2 ARM Valhall GPU Kernel Driver R39P0 ARM Valhall GPU Kernel Driver R40P0 ARM Valhall GPU Kernel Driver R41P0 ARM Valhall GPU Kernel Driver R42P0 ARM Valhall GPU Kernel Driver R43P0 ARM Valhall GPU Kernel Driver R44P0	24

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities