CVE-2024-0153
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If the operations are carefully prepared, then this in turn could give them access to all system memory. This issue affects Valhall GPU Firmware: from r29p0 through r46p0; Arm 5th Gen GPU Architecture Firmware: from r41p0 through r46p0.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - arm-security@arm.com
- Published
- 2024-07-01
- Last modified
- 2024-08-01
- Weaknesses
- CWE-119
Affected products
- 5th Gen Gpu Architecture Firmware (Arm)
- 5th Gen Gpu Architecture Kernel Driver (Arm)
- Valhall Gpu Firmware (Arm)
- Valhall Gpu Kernel Driver (Arm)
- Arm 5th Gen Gpu Architecture Firmware (Arm Ltd)
- Valhall Gpu Firmware (Arm Ltd)
References
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
