Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2023-26083

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

CVSS 3.3 · LowBuzz score 54.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 54.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 9.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
9.5
4 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • Zero-day in Arm GPU drivers exploited in targeted attacks (CVE-2023-4211)Help Net Security

    A vulnerability (CVE-2023-4211) in the kernel drivers for several Mali GPUs “may be under limited, targeted exploitation,” British semiconductor manufacturer Arm has confirmed on Monday, when it released drivers updated with patches. Arm’s Mali GPUs are used on a variety devices, most prominently on Android phones by Google, Samsung, Huawei, Nokia, Xiaomi, Oppo, and other manufacturers. About CVE-2023-4211 CVE-2023-4211 stems from improper GPU memory processing and allows a local non-privileged to gain access to already … More →

    newswww.helpnetsecurity.comOct 3, 2023, 11:13 AM
  • Google addressed 3 actively exploited flaws in AndroidSecurity Affairs

    Google released July security updates for Android that addressed tens of vulnerabilities, including three actively exploited flaws. July security updates for Android addressed more than 40 vulnerabilities, including three flaws that were actively exploited in targeted attacks. “There are indications that the following may be under limited, targeted exploitation.” reads the security bulletin. The CVE-2023-26083 is […]

    newssecurityaffairs.comJul 8, 2023, 5:34 PM
  • Android Security Updates Patch 3 Exploited VulnerabilitiesSecurityWeek

    Google’s July 2023 security updates for Android patches 43 vulnerabilities, including three exploited in the wild.

    newswww.securityweek.comJul 6, 2023, 1:34 PM
  • Update Android now! Google patches three actively exploited zero-daysMalwarebytes Labs

    In July’s update for the Android operating system (OS), Google has patched 43 vulnerabilities, three of which are actively exploited zero-day…

    newswww.malwarebytes.comJul 5, 2023, 5:00 PM
  • Veritas Vulnerabilities Exploited in Ransomware Attacks Added to CISA ‘Must Patch’ ListSecurityWeek

    CISO ordered federal agencies to patch Veritas Backup Exec vulnerabilities exploited in ransomware attacks.

    newswww.securityweek.comApr 10, 2023, 2:35 PM
  • CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

    US CISA has added Veritas Backup Exec flaws, which were exploited in ransomware attacks, to its Known Exploited Vulnerabilities catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the following five new issues to its Known Exploited Vulnerabilities Catalog: This week Mandiant researchers reported that an affiliate of the ALPHV/BlackCat ransomware gang, tracked as UNC4466, was observed […]

    newssecurityaffairs.comApr 8, 2023, 10:15 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence