Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens Coje_He, Baa Yang, Alejandro86 for the clue delivery! CTOnews.com October 5 news, Arm issued a security announcement on October 2, indicating that there is a vulnerability in the Mali GPU driver, which has been exploited by hackers.

The vulnerability, currently tracked as CVE-2023-4211, was discovered by Google threat Analysis Group (TAG) and Project Zero researchers and subsequently reported to Arm.

Details of the vulnerability have not been made public. CTOnews.com queried the official announcement, describing the vulnerability as improper access to memory and possible disclosure or manipulation of sensitive data.

"Local non-privileged users can perform incorrect GPU memory processing to access freed memory," Arm said in the announcement, and found evidence that the vulnerability "could be limited and targeted."

The following driver versions are affected by the vulnerability:

Midgard (released in 2013) GPU kernel driver: all versions from r12p0 to r32p0

Bifrost (released in 2016) GPU kernel driver: all versions from r0p0 to r42p0

Valhall (released in 2019) GPU kernel driver: all versions from r19p0 to r42p0

Arm fifth generation GPU (released in May 2023) architecture kernel driver: all versions from r41p0 to r42p0.

Mobile phones, including Galaxy S20 / S20 FE, Xiaomi Redmi K30 / K40, Motorola Edge 40 and OnePlus Nord 2, all use Valhall GPU.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.