| CVE-2023-5643 | ALTO7.8 | Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel Driver, and if the sys | 05/02/2024 |
| CVE-2023-5249 | ALTO7.0 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.T | 05/02/2024 |
| CVE-2024-23775 | ALTO7.5 | Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension(). | 31/01/2024 |
| CVE-2024-23170 | MEDIO5.5 | An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlas | 31/01/2024 |
| CVE-2023-52353 | ALTO7.5 | An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum. | 21/01/2024 |
| CVE-2023-5091 | MEDIO5.5 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory. This issue affects Valhall GPU Kernel Driver: from r37p0 through r40p0.
| 08/01/2024 |
| CVE-2023-32804 | ALTO7.8 | Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the u | 04/12/2023 |
| CVE-2023-5427 | ALTO7.8 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from | 01/12/2023 |
| CVE-2023-4295 | ALTO7.8 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | 07/11/2023 |
| CVE-2023-4272 | MEDIO5.5 | A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
| 07/11/2023 |
| CVE-2023-3889 | ALTO7.8 | A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.
| 07/11/2023 |
| CVE-2023-43615 | ALTO7.5 | Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. | 07/10/2023 |
| CVE-2023-34970 | MEDIO4.7 | A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory
| 03/10/2023 |
| CVE-2023-33200 | MEDIO4.7 | A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.
| 03/10/2023 |
| CVE-2023-4211KEV | MEDIO5.5 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | 01/10/2023 |
| CVE-2022-43703 | ALTO7.8 | An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files. | 27/07/2023 |
| CVE-2022-43702 | ALTO7.8 | When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code. | 27/07/2023 |
| CVE-2022-43701 | ALTO7.8 | When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code. | 27/07/2023 |
| CVE-2023-26085 | ALTO7.8 | A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02. | 29/06/2023 |
| CVE-2023-28469 | MEDIO5.5 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0. | 02/06/2023 |