CVE-2023-32804 - CVE House
Back to Database
Status published Unknown CVE-2023-32804

Mali GPU Userspace Driver can make an Out-of-Bounds access

Vulnerability Description

Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from r19p0 through r44p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r44p0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32804

Credits & Attribution

No credits recorded in the NVD database.

References

More from Arm Ltd

View All →
CVE-2025-8045
Mali GPU Kernel Driver allows improper GPU processing operations
Unknown 0
CVE-2025-6349
Mali GPU Kernel Driver allows improper GPU memory processing operations
Unknown 0
CVE-2025-3212
Mali GPU Kernel Driver allows access to already freed memory
Unknown 0
CVE-2025-2879
Mali GPU Kernel Driver allows improper GPU processing operations
Unknown 0
CVE-2025-1246
Mali GPU Userspace Driver allows an Out-of-Bounds access
Unknown 0

Affected Vendor

Affected Software

Midgard GPU Userspace Driver, Bifrost GPU Userspace Driver, Valhall GPU Userspace Driver, Arm 5th Gen GPU Architecture Userspace Driver
Vulnerable Versions:
r0p0, r19p0, r41p0

Timeline

Official Publish: December 4th, 2023
Last Modified: August 28th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-787

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact