CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2023-4272
Medium (5.5) in arm. EPSS 0.3% chance of exploitation in the next 30 days.
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-200, CWE-1251
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arm:bifrost_gpu_kernel_driver
- arm:mali_gpu_kernel_driver
- arm:midgard_gpu_kernel_driver
- arm:valhall_gpu_kernel_driver