138 matches found
CVE-2024-1065
CVE-2024-1065 — Page Cache Exploitation PoC Proof-of-concept exploit for CVE-2024-1065, a physical page use-after-free in the ARM Mali GPU kernel driver. The exploit demonstrates page cache exploitation : racing a freed MIGRATEMOVABLE page into the in-memory code image of a SUID binary, then...
CVE-2022-22706-poc
CVE-2022-22706 - 页缓存写入 Arm Mali GPU 驱动会将已固定为只读的页面以 CPU 可写映射的形式交给用户空间， 因此非特权进程可以获得一个可写别名，指向某个它只能以 ORDONLY 打开的文件 背后的页缓存。 exploit.c 会清空 /etc/passwd 页缓存中 root 的密码字段，并执行 su root。磁盘上的文件从未被修改。 针对本仓库中的驱动树和 QEMU 目标的 PoC（malikbase r35p0-01eac0 ， CONFIGMALINOMALI=y，x8664 GKI 5.15）。在虚拟机中运行它。 漏洞...
CVE-2023-26083
CVE-2023-26083 —— 通过时间线流泄漏 Mali GPU 内核地址 本仓库包含针对 CVE-2023-26083 的概念验证（PoC）漏洞利用代码。该漏洞位于 Mali GPU 驱动程序（Arm Mali GPU Kernel Driver）中，允许非特权用户通过时间线流（/dev/mali0）泄漏内核指针和敏感的内部信息。 漏洞概述 Mali GPU 驱动程序提供了一条“时间线流”（tlstream）功能，用于性能分析和调试。该流导出的事件包含原始内核指针（例如...
CVE-2025-8045
CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...
CVE-2021-28663
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0...
CVE-2022-42716
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0...
EUVD-2021-15328
Malware in sbrugna...
EUVD-2021-15895
Malware in sbrugna...
EUVD-2021-15327
Malware in sbrugna...
EUVD-2022-44928
Malicious code in bioql PyPI...
EUVD-2023-32146
Malicious code in bioql PyPI...
EUVD-2022-39158
Malicious code in bioql PyPI...
EUVD-2022-49563
Malicious code in bioql PyPI...
EUVD-2022-36953
Malicious code in bioql PyPI...
EUVD-2023-31858
Malicious code in bioql PyPI...
EUVD-2022-27849
Malicious code in bioql PyPI...
PT-2025-23026
Warning: High severity vulnerabilities in @Citrix XenServer VM Tools for Windows CVE-2025-27462, CVE-2025-27463, CVE-2025-27464 impact Windows VMs on XenServer 8.4 & Citrix Hypervisor 8.2 CU1 LTSR, risking sandbox escapes. Act now! Patch https://t.co/SF4q8mMyxr...
CVE-2023-28469
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0...
CVE-2023-28147
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...
CVE-2022-41757
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0...