1. Home
  2. CVE Database
  3. CVE-2023-34970
MEDIUM · 4.7

CVE-2023-34970

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully...

Vulnerability Description

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory

CVSS Score

4.7

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
ArmMali Gpu Kernel Driverr44p0
ArmValhall Gpu Kernel Driverr44p0

Related Weaknesses (CWE)

CWE-416CWE-787

References

FAQ

What is CVE-2023-34970?

CVE-2023-34970 is a vulnerability with a CVSS score of 4.7 (MEDIUM). A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully...

How severe is CVE-2023-34970?

CVE-2023-34970 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-34970?

Check the references section above for vendor advisories and patch information. Affected products include: Arm Mali Gpu Kernel Driver, Arm Valhall Gpu Kernel Driver.