CVE-2023-3889

CVE-2023-3889: Mali GPU Kernel Driver exposes sensitive data from freed memory

Vendor Arm Ltd

Product Valhall GPU Kernel Driver

Weakness CWE-119

Published November 7, 2023

Last update December 16, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.

Key dates

02Disclosure timeline

November 7, 2023 CVE published

December 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-3889 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/119.html

Related vulnerabilities

04Related CVE

CVE-2026-24794 Chunk Unloading Security Vulnerability in CardboardPowered/cardboard CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity CVE-2020-3562 Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability CVE-2020-3451 Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities CVE-2023-32284