CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-10-25
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2022-38181) Technical Analysis and Hardening Guide
[Affected Scope] Android and embedded devices utilizing Arm Mali GPU Bifrost (r0p0 to r38p1, r39p0), Valhall (r19p0 to r38p1, r39p0), and Midgard (r4p0 to r32p0) drivers
[Impact] Local unprivileged attackers can exploit a Use-After-Free (UAF) condition in GPU memory operations to gain arbitrary kernel code execution and full root privileges
[Mitigation] Apply the latest security patches provided by chipset vendors and OEMs, and immediately upgrade vulnerable driver versions