137 matches found
CVE-2025-8045
CVE-2025-8045 — Arm Mali GPU KCPU 큐 UAF CVE-2025-8045 , Arm Mali GPU 커널 드라이버kbase의 use-after-free 취약점에 대한 로컬 권한 상승 익스플로잇입니다. 비권한 로컬 프로세스가 CSF KCPU 큐 덤프 경로를 레이스하여 cpuqueue.buffer를 해제하고 다시 확보한 다음, 댕글링 할당을 자체가 소유한 페이지 테이블"dirty pagetable"로 바꾸고, 이 프리미티브를 사용하여 커널 물리 메모리 임의 읽기/쓰기를 얻습니다. 최종적으로 SELinux가...
CVE-2024-1065
CVE-2024-1065 — 页缓存利用概念验证 针对 CVE-2024-1065 的概念验证利用程序，这是一个 ARM Mali GPU 内核驱动中的物理页释放后重用漏洞。该利用演示了页缓存利用 ：将释放的 MIGRATEMOVABLE 页竞态置入 SUID 二进制文件的内存代码映像中，然后覆盖它以在不修改磁盘上任何文件的情况下实现以 root 身份执行任意代码。 仅用于研究目的。 此 PoC 针对一个在受控 x86 测试系统上已修补的漏洞。在量产 Pixel 设备上，该漏洞代码路径无法从用户空间触发。 工作原理 1. 触发 UAF — 通过 KBASEIOCTLMEMIMPORT...
CVE-2022-22706-poc
CVE-2022-22706 - 페이지 캐시 쓰기 Arm Mali GPU 드라이버는 읽기 전용으로 고정한 페이지들에 대해 사용자 공간에 CPU 쓰기 가능 매핑을 제공합니다. 따라서 권한이 없는 프로세스는 ORDONLY로만 열 수 있는 파일의 페이지 캐시에 대한 쓰기 가능한 별칭을 얻게 됩니다. exploit.c는 /etc/passwd 페이지 캐시에서 root의 비밀번호 필드를 비우고 su root를 실행합니다. 디스크의 파일은 절대 수정되지 않습니다. 이 저장소의 드라이버 트리와 QEMU 타깃을 위한 PoC입니다 malikbas...
CVE-2021-28663
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0...
CVE-2022-42716
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0...
EUVD-2021-15328
Malware in sbrugna...
EUVD-2021-15895
Malware in sbrugna...
EUVD-2021-15327
Malware in sbrugna...
EUVD-2022-44928
Malicious code in bioql PyPI...
EUVD-2023-32146
Malicious code in bioql PyPI...
EUVD-2022-39158
Malicious code in bioql PyPI...
EUVD-2022-36953
Malicious code in bioql PyPI...
EUVD-2022-49563
Malicious code in bioql PyPI...
EUVD-2023-31858
Malicious code in bioql PyPI...
EUVD-2022-27849
Malicious code in bioql PyPI...
PT-2025-23026
Warning: High severity vulnerabilities in @Citrix XenServer VM Tools for Windows CVE-2025-27462, CVE-2025-27463, CVE-2025-27464 impact Windows VMs on XenServer 8.4 & Citrix Hypervisor 8.2 CU1 LTSR, risking sandbox escapes. Act now! Patch https://t.co/SF4q8mMyxr...
CVE-2023-28469
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0...
CVE-2023-28147
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...
CVE-2022-41757
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0...
CVE-2022-36449
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...