Actively exploited in the wild
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm - Mali GPU Kernel Driver · Listed in the CISA KEV since 2023-10-03. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-4211
MediumCVSS 5.5KEVSummary
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
Risk Assessment
Risk of privilege escalation or data integrity compromise on systems with GPU access, potentially leading to system takeover.
Recommendation
Apply patches from the GPU driver vendor and restrict local access to the system.
Other vulnerabilities in GPU
See all- CVE-2026-58765Medium
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed.
- CVE-2026-20515Medium
In the GPU module, there is a possible system crash due to use-after-free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.
- CVE-2026-49746High
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Original NVD description (English source)
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.