CVE-2023-3889

Mali GPU Kernel Driver exposes sensitive data from freed memory

State: Published
Severity: 7.8 High
Published: Nov 7, 2023
Updated: Dec 16, 2025
Reserved: Jul 24, 2023

Description

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-667 Improper Locking

Affected Products

Product	Versions
Valhall GPU Kernel DriverArm Ltd	r38p0 through r44p0Affectedfrom r44p1Not affectedfrom r45p0Not affected

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.