CoreCVE
Back

HIGH

In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow

Published Dec 8, 2023

Description

In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Google_Devices
Published Dec 8, 2023
Updated Aug 2, 2024
Reserved Nov 16, 2023
Link CVE-2023-48409
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-48409
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-48409
ENISA EUVD
Assigner Google_Devices
Published Dec 8, 2023
Updated Aug 2, 2024
Exploited since n/a
Link EUVD-2023-52460
EUVD-2023-52460