{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Valhall GPU Firmware","vendor":"Arm Ltd","versions":[{"changes":[{"at":"r47p0","status":"unaffected"}],"lessThanOrEqual":"r46p0","status":"affected","version":"r29p0","versionType":"patch"}]},{"defaultStatus":"unaffected","product":"Arm 5th Gen GPU Architecture Firmware","vendor":"Arm Ltd","versions":[{"changes":[{"at":"r47p0","status":"unaffected"}],"lessThanOrEqual":"r46p0","status":"affected","version":"r41p0","versionType":"patch"}]}],"source":"arm-security@arm.com"},{"affectedData":[{"cpes":["cpe:2.3:a:arm:valhall_gpu_kernel_driver:r29p0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"valhall_gpu_kernel_driver","vendor":"arm","versions":[{"lessThan":"r46p0","status":"affected","version":"r29p0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:arm:5th_gen_gpu_architecture_kernel_driver:r41p0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"5th_gen_gpu_architecture_kernel_driver","vendor":"arm","versions":[{"lessThan":"r46p0","status":"affected","version":"r41p0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:arm:5th_gen_gpu_architecture_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"EFF42C72-F7CD-4EC2-BFF0-B945A60D0065","versionEndExcluding":"r47p0","versionStartIncluding":"r41p0","vulnerable":true},{"criteria":"cpe:2.3:o:arm:valhall_gpu_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A14DF3B5-CA8F-4CB8-A657-BC4C517B0EFA","versionEndExcluding":"r47p0","versionStartIncluding":"r29p0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If the operations are carefully prepared, then this in turn could give them access to all system memory. This issue affects Valhall GPU Firmware: from r29p0 through r46p0; Arm 5th Gen GPU Architecture Firmware: from r41p0 through r46p0."},{"lang":"es","value":"Vulnerabilidad de restricción inadecuada de operaciones dentro de los límites de un búfer de memoria en Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware permite a un usuario local sin privilegios realizar operaciones de procesamiento de GPU inadecuadas para acceder a una cantidad limitada fuera de los límites del búfer. Si las operaciones se preparan cuidadosamente, esto a su vez podría darles acceso a toda la memoria del sistema. Este problema afecta al firmware de la GPU Valhall: desde r29p0 hasta r46p0; Firmware de arquitectura de GPU Arm de quinta generación: desde r41p0 hasta r46p0."}],"id":"CVE-2024-0153","lastModified":"2026-06-17T06:52:52.837","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0153","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-07-11T00:00:00+00:00","version":"2.0.3"}}]},"published":"2024-07-01T09:15:06.343","references":[{"source":"arm-security@arm.com","tags":["Vendor Advisory"],"url":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"}],"sourceIdentifier":"arm-security@arm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"arm-security@arm.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}