CVE-2024-1395

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory. This issue affects Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r47p0.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: May 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-139506.8Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become comp CVE-2024-139517.6One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPE CVE-2024-139528.4Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become CVE-2024-139534.9Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue affects ASPECT-Enterp CVE-2024-139546.5Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affec CVE-2024-139558.82nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credent CVE-2024-139566.7SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise:CVE-2024-139577.6SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-En CVE-2024-139584.8Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterp CVE-2024-139597.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to CVE-2024-13965.4The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ para CVE-2024-139607.8Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows loca