cve/2023/CVE-2023-4295.md

### [CVE-2023-4295](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4295)
![](https://img.shields.io/static/v1?label=Product&message=Arm%205th%20Gen%20GPU%20Architecture%20Kernel%20%20Driver&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Valhall%20GPU%20Kernel%20Driver&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-190%20Integer%20Overflow%20or%20Wraparound&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416%20Use%20After%20Free&color=brighgreen)

### Description

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. 

### POC

#### Reference
- http://packetstormsecurity.com/files/176109/Arm-Mali-CSF-Overflow-Use-After-Free.html
- http://packetstormsecurity.com/files/176109/Arm-Mali-CSF-Overflow-Use-After-Free.html

#### Github
No PoCs found on GitHub currently.