Arm Ltd Vulnerabilities and Affected Products
Vulnerabilities associated with Arm 5th Gen GPU Architecture Firmware.
Products
Clear product- Valhall GPU Kernel Driver30 vulnerabilities
- Arm 5th Gen GPU Architecture Kernel Driver21 vulnerabilities
- Bifrost GPU Kernel Driver19 vulnerabilities
- Arm 5th Gen GPU Architecture Kernel Driver6 vulnerabilities
- Midgard GPU Kernel Driver5 vulnerabilities
- Arm 5th Gen GPU Architecture Userspace Driver4 vulnerabilities
- Bifrost GPU Userspace Driver4 vulnerabilities
- Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 Development Studio, Fast Models (FM), GNU Toolchain (GT), Keil MDK (KMDK), Mbed Studio (MS)3 vulnerabilities
- Valhall GPU Userspace Driver3 vulnerabilities
- Arm 5th Gen GPU Architecture Firmware1 vulnerability
- Arm Compiler for Embedded1 vulnerability
- Arm Compiler for Embedded FuSa 6.16LTS1 vulnerability
- Arm Compiler for Embedded FuSa 6.211 vulnerability
- Arm Compiler for Functional Safety 6.61 vulnerability
- Arm GNU Toolchain1 vulnerability
- CLang1 vulnerability
- Midgard GPU Userspace Driver1 vulnerability
- Valhall GPU Firmware1 vulnerability
- Valhall GPU Userspace Driver1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-0153HIGH | Mali GPU Firmware allows improper GPU processing operationsImproper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If the operations are carefully prepared, then this in turn could give them access to all system memory. This issue affects Valhall GPU Firmware: from r29p0 through r46p0; Arm 5th Gen GPU Architecture Fir… CWE-119Jul 1, 2024 | CVSS7.8v3.1 | EPSS0.217% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |