CVE-2024-1395 Vulnerability Details

  /     /     /  

CVE-2024-1395 Metadata Quick Info

CVE Published: 03/05/2024 | CVE Updated: 01/08/2024 | CVE Year: 2024
Source: Arm | Vendor: Arm Ltd | Product: Arm 5th Gen GPU Architecture Kernel Driver
Status : PUBLISHED

---

CVE-2024-1395 Description

Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory. This issue affects Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-416
CWE Name: CWE-416 Use After Free
Source: Arm Ltd

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).