NetSight
low3.3

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module.

Impact

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.

Affected products

VendorProductAffected versions
ArmAvalon Android Gralloc Module
Version r41p0
ArmBifrost Android Gralloc Module
from r24p0 through r41p0
ArmValhall Android Gralloc Module
from r24p0 through r41p0

Weakness classification

References