ARM Mali GPU Kernel Driver < r41p0 Use After Free (CVE-2022-46891)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r41p0 running on Midgard, Bifrost or Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed...

ARM Mali GPU Kernel Driver < r38p1 / r40p0 Improper Memory Access (CVE-2022-36449)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r38p1 or r40p0 running on Midgard, Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can make improper GPU processing operations to gain...

ARM Mali GPU Kernel Driver < r24p0 / < r30p0 Use After Free (CVE-2022-28349)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r24p0 running on Bifrost or Valhall architecture or prior to r30p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. A non-privileged user can obtain access to already freed...

ARM Mali GPU Kernel Driver < r30p0 / < r31p0 Use After Free (CVE-2021-29256)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r30p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper operations on GPU...

ARM Mali GPU Kernel Driver < r43p0 Use After Free (CVE-2023-28147)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r43p0 running on Midgard, Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already...

ARM Mali GPU Kernel Driver < r42p0 Use After Free (CVE-2022-46395)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r42p0 running on Midgard, Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already...

ARM Mali GPU Kernel Driver < r29p0 / < r31p0 Use After Free (CVE-2021-28663)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r29p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. vulnerability. A non-privileged user can make improper...

ARM Mali GPU Kernel Driver < r32p0 / < r37p0 Use After Free (CVE-2022-28348)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r32p0 running on Midgard architecture or prior to r37p0 running on Bifrost or Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper operations on GPU...

ARM Mali GPU Kernel Driver < r32p0 / < r36p0 Improper Memory Access (CVE-2022-22706)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r32p0 running on Midgard architecture or prior to r36p0 running on Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can get a write acce...

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified as actively exploited in targeted attacks. One of the vulnerabilities tracked as CVE-2023-26083 is a memory leak...

Arm Mali GPU Kernel Driver < r43p0 Information Exposure (CVE-2023-26083)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r43p0 running on Migard, Bifrost, Valhall or 5th Gen architecture. It is, therefore, affected by an information disclosure vulnerability. A non-privileged user can make valid GPU processing operations that expose...

CVE-2023-28147

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...

CVE-2023-28147

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...

Design/Logic Flaw

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...

PT-2023-21594 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Midgard r29p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r17p0 through r42p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r42p0 Arm Mali GPU Kernel Driver versions Arm's GPU...

CVE-2023-28147

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...

Threat Roundup for April 21 to April 28

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between April 21 and April 28. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 to run on FireTV 3rd gen Cube Thi...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 for FireTV 2nd gen Cube This is a...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...