CVE-2023-5643: arm ltd arm 5th gen gpu architecture kernel driver Out-of-bounds Write
Vulnerability summary
CVE-2023-5643 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in arm ltd arm 5th gen gpu architecture kernel driver. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.9% of scored vulnerabilities.
Timeline
- 05-02-2024PublishedVulnerability first disclosed.
- 15-05-2025Last modifiedVulnerability information updated.
Description
Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel Driver, and if the system’s memory is carefully prepared by the user, then this in turn could write to memory outside of buffer bounds.This issue affects Bifrost GPU Kernel Driver: from r41p0 through r45p0; Valhall GPU Kernel Driver: from r41p0 through r45p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r45p0.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
0.00 pp
From 0.18% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Arm3 products
- 5th_gen_gpu_architecture_kernel_driver≥ r41p0, < r46p0
- bifrost_gpu_kernel_driver≥ r41p0, < r46p0
- valhall_gpu_kernel_driver≥ r41p0, < r46p0
Arm ltd3 products
- arm 5th gen gpu architecture kernel driver≥ r41p0, ≤ r45p0
- bifrost gpu kernel driver≥ r41p0, ≤ r45p0
- valhall gpu kernel driver≥ r41p0, ≤ r45p0
2 vendors · 6 products