Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-5091: Security update for :unknown:

CVE-2023-5091 · published 2 years ago

Summary

A security issue affects :unknown: (Android). The advisory does not describe the issue in detail. Update to SoCVersion:2024-02-05 or later. See the linked advisory for details.

What to do

Update google :unknown: to version SoCVersion:2024-02-05.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	:unknown:	>= SoCVersion:0, < SoCVersion:2024-02-05 Fix: upgrade to SoCVersion:2024-02-05
–	arm	valhall_gpu_kernel_driver	>= r37p0, <= r40p0 `cpe:2.3:a:arm:valhall_gpu_kernel_driver::::::::`

Original advisory text

ASB-A-298150556

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory. This issue affects Valhall GPU Kernel Driver: from r37p0 through r40p0.

References

https://source.android.com/security/bulletin/2024-02-01 Vendor Advisory
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerab... Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-416Use After Free

Timeline

Published1 Feb 2024

Updated26 Oct 2026

First seen24 Mar 2026

Sources

ASB-A-298150556 · OSV

CVE-2023-5091 · NVD

Track software like this

Free during beta