First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-4211

MediumCVSS 5.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Arm Ltd	Midgard GPU Kernel Driver	>= r12p0, <= r32p0
Arm Ltd	Bifrost GPU Kernel Driver	>= r0p0, <= r42p0
Arm Ltd	Valhall GPU Kernel Driver	>= r19p0, <= r42p0
Arm Ltd	Arm 5th Gen GPU Architecture Kernel Driver	>= r41p0, <= r42p0

References

Timeline

Published: Oct 1, 2023
Last modified: Jun 17, 2026
Added to CISA KEV: Oct 3, 2023
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-421105.5PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d CVE-2023-421117.8PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex CVE-2023-421125.5PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d CVE-2023-421135.5PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d CVE-2023-421145.3Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitiv CVE-2023-421159.8Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a CVE-2023-421169.8Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a CVE-2023-421179.8Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute CVE-2023-421188.8Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrar CVE-2023-421193.1Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensiti CVE-2023-42126.8A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary com CVE-2023-421208.8Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu

CVE-2023-4211: Medium severity, CVSS 5.5 | Vulnix