CVE-2023-32804: arm ltd arm 5th gen gpu architecture userspace driver Out-of-bounds Write
Vulnerability summary
CVE-2023-32804 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in arm ltd arm 5th gen gpu architecture userspace driver. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.7% of scored vulnerabilities.
Timeline
- 04-12-2023PublishedVulnerability first disclosed.
- 28-08-2024Last modifiedVulnerability information updated.
Description
Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from r19p0 through r44p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r44p0.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
0.00 pp
From 0.25% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Arm4 products
- 5th_gen_gpu_architecture_kernel_driver≥ r41p0, ≤ r44p0
- bifrost_gpu_kernel_driver≥ r0p0, ≤ r44p0
- midgard_gpu_kernel_driver≥ r0p0, ≤ r32p0
- valhall_gpu_kernel_driver≥ r19p0, ≤ r44p0
Arm ltd4 products
- arm 5th gen gpu architecture userspace driver≥ r41p0, ≤ r44p0
- bifrost gpu userspace driver≥ r0p0, ≤ r44p0
- midgard gpu userspace driver≥ r0p0, ≤ r32p0
- valhall gpu userspace driver≥ r19p0, ≤ r44p0
2 vendors · 8 products