CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
ARM Mali GPU Kernel Driver Memory Leak and Information Disclosure Vulnerability (CVE-2023-26083) Technical Advisory
[Affected Scope] ARM Mali GPU Kernel Drivers (Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, Avalon r41p0-r42p0)
[Impact] A local non-privileged user can perform valid GPU processing operations to expose sensitive kernel metadata, facilitating KASLR bypass and local privilege escalation (LPE)
[Mitigation] Apply official security patches from chipset vendors and OEMs, and immediately upgrade device firmware to the latest version
ARM Mali GPU Kernel Driver Memory Corruption Vulnerability (CVE-2022-22706) Technical Advisory
[Affected Scope] Devices equipped with ARM Mali GPU Kernel Driver Midgard (r26p0 to r31p0), Bifrost (r0p0 to r35p0), and Valhall (r19p0 to r35p0) architectures
[Impact] A local non-privileged user can gain write access to read-only memory pages, leading to local privilege escalation (LPE) and arbitrary code execution
[Mitigation] Apply the official security patches and upgrade to the latest driver versions (Bifrost/Valhall r36p0+, Midgard r32p0+) provided by ARM and device OEMs
Samsung Mobile MFC Charger Driver Race Condition Vulnerability (CVE-2021-25395) Technical Advisory
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Security Maintenance Release) MAY-2021 Release 1
[Impact] Local attackers with compromised radio privileges can bypass signature checks via a race condition, leading to arbitrary code execution in the kernel context
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) immediately and restrict unauthorized application installation
ARM Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2021-29256) Analysis and Mitigation Guide
[Affected Scope] ARM Mali GPU kernel driver Bifrost (r16p0 through r29p0), Valhall (r19p0 through r29p0), and Midgard (r28p0 through r30p0)
[Impact] An unprivileged local attacker can exploit a Use-After-Free (UAF) condition to access freed memory, leading to sensitive information disclosure or root privilege escalation
[Mitigation] Apply the official security patches from chipset vendors and OEMs, upgrading the Mali GPU kernel driver to version r30p0 or higher
GIGABYTE Drivers (GPCIDrv/GDrv) Privilege Escalation and Kernel Code Execution (CVE-2018-19322)
[Affected Scope] GPCIDrv and GDrv drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] Local attackers can exploit the exposed IO port read/write functionality to execute arbitrary code with kernel-level privileges (SYSTEM) and bypass security controls
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions, or block and remove the vulnerable drivers using Windows Defender Application Control (WDAC)