PT-2023-30829 · Arm · Mali Kbase

CVE-2023-48409

·

Publicado

2023-12-08

·

Atualizado

2025-08-30

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions private/google-modules/gpu/mali kbase/mali kbase core linux.c (affected versions not specified)
Description In the gpu pixel handle buffer liveness update ioctl function of private/google-modules/gpu/mali kbase/mali kbase core linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-48409

Produtos afetados

Mali Kbase