CVE_2022_46395_Gazelle

Exploit para CVE-2022-46395 para ejecutar en FireTV 3.ª generación Cube Este es un fork del POC para Pixel 6 del investigador de seguridad Man Yue Mo para CVE-2022-46395. Lea su detallado informe sobre la vulnerabilidad aquí. Se han realizado cambios para tener en cuenta el espacio de usuario de ...

CVE-2022-20186

针对CVE-2022-20186的漏洞利用 相关分析文章可在此处查阅。这是我在2022年1月报告的Arm Mali内核驱动程序中的一个漏洞。该漏洞可用于从不可信的应用程序域获得任意内核代码执行权限，进而禁用SELinux并获得root权限。 该漏洞利用已在Google Pixel 6上测试，支持从2021年11月到2022年2月的补丁级别。通过更改几个镜像偏移量，可以轻松添加对其他固件的支持。作为参考，我使用了以下命令与ndk-21中的clang进行编译： root@kitploit:...

CVE-2022-46395

CVE-2022-46395 的利用 详细分析文章可在此处找到。这是一个我在2022年11月报告的Arm Mali内核驱动漏洞。该漏洞可用于从未受信任的应用域获取任意内核代码执行权限，进而用于禁用SELinux并获得root权限。 该利用已在搭载2022年11月和2023年1月补丁的Google Pixel 6上进行测试。作为参考，我使用以下命令在ndk-21中通过clang编译： root@kitploit:...

CVE_2022_46395_Raven

Exploit para CVE-2022-46395 para ejecutar en FireTV 2nd gen Cube Este es un fork del Pixel 6 POC para CVE-2022-46395 del investigador de seguridad Man Yue Mo. Lee su análisis detallado de la vulnerabilidad aquí. Se han realizado cambios para tener en cuenta el espacio de usuario de 32 bits de...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel before version 5.19, the file drivers/gpu/drm/arm/malidpplanes.c misinterprets the return value of getsgtable. It expects the return value to be NULL in the error case, but in reality, it is an error pointer...

EUVD-2022-49205

Malicious code in bioql PyPI...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

The vulnerability of the Arm Mali driver for ChromeOS and ChromeOS Flex operating systems allows attackers to gain increased privileges.

The vulnerability of the Arm Mali driver for ChromeOS and ChromeOS Flex operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2023-28147

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

Arm Mali GPU Kernel Driver 安全漏洞

The Arm Mali GPU Kernel Driver is a driver for a graphics processor unit from Arm UK. A security vulnerability exists in the Arm Mali GPU Kernel Driver Valhall versions r29p0 through r38p0, which arises from incorrect processing operations on the GPU...