Vulnerability-Lookup

CVE-2023-4211 (GCVE-0-2023-4211)

Vulnerability from cvelistv5 – Published: 2023-10-01 17:00 – Updated: 2025-10-21 23:05

CISA Previdian

Title

Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

Summary

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-11-15 16:37 UTC

CWE

CWE-416 - Use after free

Assigner

Arm CNA under the mitre root

CNA scorecard D 52/100 over 14 records in the last 180 days details

References

2 references

URL	Tags
https://developer.arm.com/Arm%20Security%20Center…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

4 products

Vendor	Product	Version	CPE status
Arm Ltd	Midgard GPU Kernel Driver	Affected: r12p0 , ≤ r32p0 (patch)	guessed
Arm Ltd	Bifrost GPU Kernel Driver	Affected: r0p0 , ≤ r42p0 (patch)	guessed
Arm Ltd	Valhall GPU Kernel Driver	Affected: r19p0 , ≤ r42p0 (patch)	guessed
Arm Ltd	Arm 5th Gen GPU Architecture Kernel Driver	Affected: r41p0 , ≤ r42p0 (patch)	guessed

Date Public

2023-10-01 10:00

Credits

Maddie Stone, Google Threat Analysis Group Jann Horn, Google Project Zero

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: b24ab48c-6058-475b-94f6-5d1a2e29ed0d

Vulnerability ID: CVE-2023-4211

Status: Confirmed

Status Updated: 2023-10-03 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2023-10-03

Asserted: 2023-10-03

Scope

Notes: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Affected: Arm / Mali GPU Kernel Driver | Description: Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. | Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. | Due date: 2023-10-24 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2023-4211

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-416
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Mali GPU Kernel Driver
Due Date	2023-10-24
Date Added	2023-10-03
Vendorproject	Arm
Vulnerabilityname	Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2023-4211

Created: 2026-02-02 12:26 UTC | Updated: 2026-11-04 13:36 UTC

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: f0d7909b-53f0-4366-befd-690bb1810f81

Vulnerability ID: CVE-2023-4211

Status: Confirmed

Status Updated: 2023-10-03 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2023-10-03

Asserted: 2023-10-03

Scope

Notes: KEVIntel entry: Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations | Affected: Arm Ltd / Midgard GPU Kernel Driver, Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver | CVSS: 5.5 (MEDIUM) | Used in malware: unknown | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
Vendor	Arm Ltd
Product	Midgard GPU Kernel Driver, Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver
Added Date	2023-10-03T00:00:00.000Z
Cvss Score	5.5
Epss Score	None
Cvss Severity	MEDIUM
Epss Percentile	None
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-23 14:05 UTC | Updated: 2026-07-10 06:14 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:17:12.155Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-4211",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-15T16:37:52.728085Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2023-10-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:36.029Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2023-10-03T00:00:00.000Z",
            "value": "CVE-2023-4211 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Midgard GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r32p0",
              "status": "affected",
              "version": "r12p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Bifrost GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r42p0",
              "status": "affected",
              "version": "r0p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Valhall GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r42p0",
              "status": "affected",
              "version": "r19p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Arm 5th Gen GPU Architecture Kernel  Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r42p0",
              "status": "affected",
              "version": "r41p0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Maddie Stone, Google Threat Analysis Group"
        },
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Jann Horn, Google Project Zero"
        }
      ],
      "datePublic": "2023-10-01T10:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\u003c/p\u003e"
            }
          ],
          "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use after free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-04T16:35:12.961Z",
        "orgId": "56a131ea-b967-4a0d-a41e-5f3549952846",
        "shortName": "Arm"
      },
      "references": [
        {
          "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "arm-security@arm.com",
          "ID": "CVE-2023-4211",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Mali GPU Kernel Driver",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Midgard GPU Kernel  Driver"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Arm Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "5.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
              "refsource": "MISC",
              "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846",
    "assignerShortName": "Arm",
    "cveId": "CVE-2023-4211",
    "datePublished": "2023-10-01T17:00:27.113Z",
    "dateReserved": "2023-08-07T15:24:51.156Z",
    "dateUpdated": "2025-10-21T23:05:36.029Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2023-4211",
      "cwes": [
        "CWE-416"
      ],
      "dateAdded": "2023-10-03",
      "dueDate": "2023-10-24",
      "forensicTriage": "No",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2023-4211",
      "product": "Mali GPU Kernel Driver",
      "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.",
      "vendorProject": "Arm",
      "vulnerabilityName": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability"
    },
    "epss": {
      "cve": "CVE-2023-4211",
      "date": "2026-11-14",
      "epss": "0.00969",
      "percentile": "0.62414"
    },
    "fkie_nvd": {
      "cisaActionDue": "2023-10-24",
      "cisaExploitAdd": "2023-10-03",
      "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability",
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "574A1E71-2B1E-48D4-AA93-974B4E34C64F",
                  "versionEndExcluding": "r43p0",
                  "versionStartIncluding": "r41p0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C7205027-9AE7-4095-B0A7-B1ECA71ACCAE",
                  "versionEndExcluding": "r43p0",
                  "versionStartIncluding": "r0p0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "16C78155-83B1-429D-9985-0327AD153FC6",
                  "versionEndIncluding": "r32p0",
                  "versionStartIncluding": "r12p0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "38BF4620-6A5C-4034-8D17-BC1AC5F8C711",
                  "versionEndExcluding": "r43p0",
                  "versionStartIncluding": "r19p0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\n\n"
        },
        {
          "lang": "es",
          "value": "Un usuario local sin privilegios puede realizar operaciones inadecuadas de procesamiento de la memoria de la GPU para obtener acceso a la memoria ya liberada."
        }
      ],
      "id": "CVE-2023-4211",
      "lastModified": "2024-11-29T14:45:13.110",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            },
            "exploitabilityScore": 1.8,
            "impactScore": 3.6,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2023-10-01T18:15:09.927",
      "references": [
        {
          "source": "arm-security@arm.com",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
        }
      ],
      "sourceIdentifier": "arm-security@arm.com",
      "vulnStatus": "Analyzed",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-416"
            }
          ],
          "source": "arm-security@arm.com",
          "type": "Secondary"
        },
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-416"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Midgard GPU Kernel Driver",
                "vendor": "Arm Ltd",
                "versions": [
                  {
                    "lessThanOrEqual": "r32p0",
                    "status": "affected",
                    "version": "r12p0",
                    "versionType": "patch"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Bifrost GPU Kernel Driver",
                "vendor": "Arm Ltd",
                "versions": [
                  {
                    "lessThanOrEqual": "r42p0",
                    "status": "affected",
                    "version": "r0p0",
                    "versionType": "patch"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Valhall GPU Kernel Driver",
                "vendor": "Arm Ltd",
                "versions": [
                  {
                    "lessThanOrEqual": "r42p0",
                    "status": "affected",
                    "version": "r19p0",
                    "versionType": "patch"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Arm 5th Gen GPU Architecture Kernel  Driver",
                "vendor": "Arm Ltd",
                "versions": [
                  {
                    "lessThanOrEqual": "r42p0",
                    "status": "affected",
                    "version": "r41p0",
                    "versionType": "patch"
                  }
                ]
              }
            ],
            "source": "arm-security@arm.com"
          }
        ],
        "cisaActionDue": "2023-10-24",
        "cisaExploitAdd": "2023-10-03",
        "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
        "cisaVulnerabilityName": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability",
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "574A1E71-2B1E-48D4-AA93-974B4E34C64F",
                    "versionEndExcluding": "r43p0",
                    "versionStartIncluding": "r41p0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C7205027-9AE7-4095-B0A7-B1ECA71ACCAE",
                    "versionEndExcluding": "r43p0",
                    "versionStartIncluding": "r0p0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16C78155-83B1-429D-9985-0327AD153FC6",
                    "versionEndIncluding": "r32p0",
                    "versionStartIncluding": "r12p0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "38BF4620-6A5C-4034-8D17-BC1AC5F8C711",
                    "versionEndExcluding": "r43p0",
                    "versionStartIncluding": "r19p0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory."
          },
          {
            "lang": "es",
            "value": "Un usuario local sin privilegios puede realizar operaciones inadecuadas de procesamiento de la memoria de la GPU para obtener acceso a la memoria ya liberada."
          }
        ],
        "id": "CVE-2023-4211",
        "lastModified": "2026-06-17T06:37:19.410",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2023-4211",
                "options": [
                  {
                    "exploitation": "active"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-15T16:37:52.728085Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2023-10-01T18:15:09.927",
        "references": [
          {
            "source": "arm-security@arm.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "US Government Resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
          }
        ],
        "sourceIdentifier": "arm-security@arm.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "arm-security@arm.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-11-07T13:27:00+00:00",
      "cve": "CVE-2023-4211",
      "id": "CVE-2023-4211",
      "initial_release_date": "2023-08-15T00:00:00+00:00",
      "product_status:known_not_affected": "199",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-4211.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T07:17:12.155Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "NONE",
                  "baseScore": 5.5,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-4211",
                    "options": [
                      {
                        "Exploitation": "active"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2023-11-15T16:37:52.728085Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              },
              {
                "other": {
                  "content": {
                    "dateAdded": "2023-10-03",
                    "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
                  },
                  "type": "kev"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-02-04T14:08:11.666Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
              }
            ],
            "timeline": [
              {
                "lang": "en",
                "time": "2023-10-03T00:00:00+00:00",
                "value": "CVE-2023-4211 added to CISA KEV"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Midgard GPU Kernel Driver",
              "vendor": "Arm Ltd",
              "versions": [
                {
                  "lessThanOrEqual": "r32p0",
                  "status": "affected",
                  "version": "r12p0",
                  "versionType": "patch"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Bifrost GPU Kernel Driver",
              "vendor": "Arm Ltd",
              "versions": [
                {
                  "lessThanOrEqual": "r42p0",
                  "status": "affected",
                  "version": "r0p0",
                  "versionType": "patch"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Valhall GPU Kernel Driver",
              "vendor": "Arm Ltd",
              "versions": [
                {
                  "lessThanOrEqual": "r42p0",
                  "status": "affected",
                  "version": "r19p0",
                  "versionType": "patch"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Arm 5th Gen GPU Architecture Kernel  Driver",
              "vendor": "Arm Ltd",
              "versions": [
                {
                  "lessThanOrEqual": "r42p0",
                  "status": "affected",
                  "version": "r41p0",
                  "versionType": "patch"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "user": "00000000-0000-4000-9000-000000000000",
              "value": "Maddie Stone, Google Threat Analysis Group "
            },
            {
              "lang": "en",
              "type": "finder",
              "user": "00000000-0000-4000-9000-000000000000",
              "value": "Jann Horn, Google Project Zero"
            }
          ],
          "datePublic": "2023-10-01T10:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\u003c/p\u003e"
                }
              ],
              "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\n\n"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-233",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-233 Privilege Escalation"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-416",
                  "description": "CWE-416 Use after free",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-10-04T16:35:12.961Z",
            "orgId": "56a131ea-b967-4a0d-a41e-5f3549952846",
            "shortName": "Arm"
          },
          "references": [
            {
              "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations",
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          },
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "arm-security@arm.com",
              "ID": "CVE-2023-4211",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Mali GPU Kernel Driver",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "Midgard GPU Kernel  Driver"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Arm Ltd"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "5.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
                  "refsource": "MISC",
                  "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846",
        "assignerShortName": "Arm",
        "cveId": "CVE-2023-4211",
        "datePublished": "2023-10-01T17:00:27.113Z",
        "dateReserved": "2023-08-07T15:24:51.156Z",
        "dateUpdated": "2025-10-21T23:05:36.029Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2023-AVI-0811

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

L'éditeur indique que les vulnérabilités CVE-2023-4863 et CVE-2023-4211 sont exploitées.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Google	Android	Google Android versions 11, 12, 12L, 13 sans le correctif de sécurité du 06 octobre 2023
	Google	Android	Google Pixel sans le correctif de sécurité du 05 octobre 2023

References

Title

Publication Time

CERTFR-2023-AVI-0811

Vulnerability from certfr_avis - Published: - Updated:

L'éditeur indique que les vulnérabilités CVE-2023-4863 et CVE-2023-4211 sont exploitées.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Google	Android	Google Android versions 11, 12, 12L, 13 sans le correctif de sécurité du 06 octobre 2023
	Google	Android	Google Pixel sans le correctif de sécurité du 05 octobre 2023

References

Title

Publication Time

FKIE_CVE-2023-4211

Vulnerability from fkie_nvd - Published: 2023-10-01 18:15 - Updated: 2026-06-17 06:37

CISA Previdian

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

References

URL	Tags
arm-security@arm.com	https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities	Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211	US Government Resource

Impacted products

Vendor	Product	Version
arm	5th_gen_gpu_architecture_kernel_driver	*
arm	bifrost_gpu_kernel_driver	*
arm	midgard_gpu_kernel_driver	*
arm	valhall_gpu_kernel_driver	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Midgard GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r32p0",
              "status": "affected",
              "version": "r12p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Bifrost GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r42p0",
              "status": "affected",
              "version": "r0p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Valhall GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r42p0",
              "status": "affected",
              "version": "r19p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Arm 5th Gen GPU Architecture Kernel  Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r42p0",
              "status": "affected",
              "version": "r41p0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "source": "arm-security@arm.com"
    }
  ],
  "cisaActionDue": "2023-10-24",
  "cisaExploitAdd": "2023-10-03",
  "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Arm Mali GPU Kernel Driver Use-After-Free Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "574A1E71-2B1E-48D4-AA93-974B4E34C64F",
              "versionEndExcluding": "r43p0",
              "versionStartIncluding": "r41p0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7205027-9AE7-4095-B0A7-B1ECA71ACCAE",
              "versionEndExcluding": "r43p0",
              "versionStartIncluding": "r0p0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "16C78155-83B1-429D-9985-0327AD153FC6",
              "versionEndIncluding": "r32p0",
              "versionStartIncluding": "r12p0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "38BF4620-6A5C-4034-8D17-BC1AC5F8C711",
              "versionEndExcluding": "r43p0",
              "versionStartIncluding": "r19p0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory."
    },
    {
      "lang": "es",
      "value": "Un usuario local sin privilegios puede realizar operaciones inadecuadas de procesamiento de la memoria de la GPU para obtener acceso a la memoria ya liberada."
    }
  ],
  "id": "CVE-2023-4211",
  "lastModified": "2026-06-17T06:37:19.410",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-4211",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2023-11-15T16:37:52.728085Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2023-10-01T18:15:09.927",
  "references": [
    {
      "source": "arm-security@arm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
    }
  ],
  "sourceIdentifier": "arm-security@arm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "arm-security@arm.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-7537-P54V-MH3V

Vulnerability from github – Published: 2023-10-01 18:31 – Updated: 2025-10-22 00:32

Details

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Severity

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-4211"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-10-01T18:15:09Z",
    "severity": "MODERATE"
  },
  "details": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.",
  "id": "GHSA-7537-p54v-mh3v",
  "modified": "2025-10-22T00:32:51Z",
  "published": "2023-10-01T18:31:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4211"
    },
    {
      "type": "WEB",
      "url": "https://arstechnica.com/security/2023/10/vulnerable-arm-gpu-drivers-under-active-exploitation-patches-may-not-be-available"
    },
    {
      "type": "WEB",
      "url": "https://chromereleases.googleblog.com/2023/08/long-term-support-channel-update-for_23.html"
    },
    {
      "type": "WEB",
      "url": "https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-chromeos_25.html"
    },
    {
      "type": "WEB",
      "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
    },
    {
      "type": "WEB",
      "url": "https://source.android.com/docs/security/bulletin/pixel/2023-09-01"
    },
    {
      "type": "WEB",
      "url": "https://www.bleepingcomputer.com/news/security/arm-warns-of-mali-gpu-flaws-likely-exploited-in-targeted-attacks"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4211"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2023-4211

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Aliases

CVE-2023-4211

Aliases

CVE-2023-4211

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-4211",
    "id": "GSD-2023-4211"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-4211"
      ],
      "details": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\n\n",
      "id": "GSD-2023-4211",
      "modified": "2023-12-13T01:20:26.907587Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "arm-security@arm.com",
        "ID": "CVE-2023-4211",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Midgard GPU Kernel Driver",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "r12p0",
                          "version_value": "r32p0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Bifrost GPU Kernel Driver",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "r0p0",
                          "version_value": "r42p0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Valhall GPU Kernel Driver",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "r19p0",
                          "version_value": "r42p0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Arm 5th Gen GPU Architecture Kernel  Driver",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "r41p0",
                          "version_value": "r42p0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Arm Ltd"
            }
          ]
        }
      },
      "credits": [
        {
          "lang": "en",
          "value": "Maddie Stone, Google Threat Analysis Group "
        },
        {
          "lang": "en",
          "value": "Jann Horn, Google Project Zero"
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\n\n"
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-416",
                "lang": "eng",
                "value": "CWE-416 Use after free"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
            "refsource": "MISC",
            "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
          }
        ]
      },
      "source": {
        "discovery": "EXTERNAL"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "r42p0",
                "versionStartIncluding": "r41p0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:arm:midgard:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "r32p0",
                "versionStartIncluding": "r12p0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:arm:bifrost:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "r42p0",
                "versionStartIncluding": "r0p0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:arm:valhall:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "r42p0",
                "versionStartIncluding": "r19p0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "arm-security@arm.com",
          "ID": "CVE-2023-4211"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A local non-privileged user can make improper GPU memory processing operations  to gain access to already freed memory.\n\n"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-416"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-10-04T20:51Z",
      "publishedDate": "2023-10-01T18:15Z"
    }
  }
}

WID-SEC-W-2023-2548

Vulnerability from csaf_certbund - Published: 2023-10-03 22:00 - Updated: 2023-10-03 22:00

Summary

Google Android: Mehrere Schwachstellen

Severity

Hoch

Scope

52 vulnerabilities in this advisory, including CVE-2023-4211.

CVE-2023-4211

In Google Android existieren mehrere Schwachstellen. Diese bestehen in den Komponenten "Framework", "System", "Google Play System Updates", "ARM components", "MediaTek components", "Unisoc components", "Qualcomm components" sowie"Qualcomm closed-source components". Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

Known affected: 4 products

Open the full advisory

WID-SEC-W-2023-2841

Vulnerability from csaf_certbund - Published: 2023-11-06 23:00 - Updated: 2023-12-05 23:00

Summary

Samsung Android: Mehrere Schwachstellen ermöglichen

Severity

Hoch

Scope

63 vulnerabilities in this advisory, including CVE-2023-4211.

CVE-2023-4211

Es bestehen mehrere Schwachstellen in Samsung Android. Diese Fehler bestehen in mehreren Komponenten wie SecSettings, SmsController oder der USB-Gadget-Schnittstelle aufgrund einer unsachgemäßen Eingabe- und Zertifikatsvalidierung, unsachgemäßer Zugriffskontrolle und anderen. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren. Einige der Schwachstellen erfordern eine Benutzerinteraktion, um sie erfolgreich auszunutzen.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-4211 (GCVE-0-2023-4211)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

CERTFR-2023-AVI-0811

Solution

CERTFR-2023-AVI-0811

Solution

FKIE_CVE-2023-4211

GHSA-7537-P54V-MH3V

GSD-2023-4211

WID-SEC-W-2023-2548

WID-SEC-W-2023-2841

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour