PT-2023-12020

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description A missing size check in the PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver may cause an integer overflow, leading to out-of-bounds heap access. This could result in...

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a missing size check in the PVRSRVBridgeRGXKickRS of the PowerVR kernel driver component means that an integer overflow allowing...

CVE-2021-0875

CVE-2021-0875 affects the PowerVR GPU stack (PVRSRVBridgeChangeSparseMem in the PowerVR kernel driver). The issue is a missing size check that can cause an integer overflow, enabling out-of-bounds heap access. This could lead to local elevation of privilege with no additional execution privileges...

CVE-2021-0880

In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0885: Integer Overflow or Wraparound

In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

CVE-2021-0884

CVE-2021-0884 concerns the PowerVR kernel driver’s PVRSRVBridgePhysmemImportSparseDmaBuf function. A missing size check enables an integer overflow, which could permit out-of-bounds heap access and local escalation of privilege without additional execution privileges. Exploitation details (vector...

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a missing size check in the PVRSRVBridgeDevicememHistorySparseChange component of the PowerVR kernel driver component means that...

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an input validation error vulnerability that originates in the PowerVRSRVBridgePhysmemImportSparseDmaBuf component of the PowerVR kernel driver component where the lack of size checking means tha...

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a missing size check in the PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver component means that there could be an...

CVE-2021-0879

CVE-2021-0879 involves the PVRSRVBridgeRGXTDMSubmitTransfer path of the PowerVR kernel driver. A missing size check enables a potential integer overflow, leading to out-of-bounds heap access. This could allow local escalation of privilege without additional execution privileges and without user i...

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a missing size check in the PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver component means that an integer overflow allowin...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 to run on FireTV 3rd gen Cube Thi...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 for FireTV 2nd gen Cube This is a...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

CVE-2022-46396: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

PT-2023-14928 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali Kernel Driver versions Valhall r29p0 through r41p0 Arm Mali Kernel Driver versions Avalon r41p0 before r42p0 Description: An issue was discovered in the Arm Mali Kernel Driver, allowing a non-privileged user to make improper GPU memo...

CVE-2022-46396

A vulnerability exists in the Arm Mali Kernel Driver where a non-privileged user can perform improper GPU memory processing operations to access a limited amount of data outside of buffer bounds (CWE-119 ). This issue affects Valhall versions r29p0 through r41p0 (prior to r42p0 ) and Avalon versi...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

ARM Mali GPU Kernel Driver buffer error vulnerability

ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. A security vulnerability exists in the ARM Mali GPU Kernel Driver that originates from an unprivileged user being able to perform incorrect GPU memory handling operations to access a limited amount outside of buffer...

ARM Mali GPU Kernel Driver buffer error vulnerability

ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. A security vulnerability exists in the ARM Mali GPU Kernel Driver that originates from an unprivileged user being able to read a small portion of the allocator process memory...