ARM Mali GPU Kernel Driver < r29p0 / < r31p0 Use After Free (CVE-2021-28663)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r29p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. vulnerability. A non-privileged user can make improper...

ARM Mali GPU Kernel Driver < r42p0 Use After Free (CVE-2022-46394)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r42p0 running on Valhall or 5th Gen architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Not...

ARM Mali GPU Kernel Driver < r39p0 Use After Free (CVE-2022-33917)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r39p0 running on Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Note that Ness...

ARM Mali GPU Kernel Driver < r38p2 / < r40p0 Improper Memory Access (CVE-2022-41757)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r38p2 or r40p0 running on Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can make improper GPU memory processing operations to gain write access ...

ARM Mali GPU Kernel Driver < r24p0 / < r30p0 Use After Free (CVE-2022-28349)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r24p0 running on Bifrost or Valhall architecture or prior to r30p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. A non-privileged user can obtain access to already freed...

ARM Mali GPU Kernel Driver < r30p0 / < r31p0 Use After Free (CVE-2021-29256)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r30p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper operations on GPU...

ARM Mali GPU Kernel Driver < r37p0 Use After Free (CVE-2022-28350)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r37p0 running on Valhall architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. Note that Ness...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

VulnCheck KEV: CVE-2021-29256

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information...

The vulnerability of the saa7134_finidev() function in the drivers/media/pci/saa7134/saa7134-core.c file of the Philips SAA7134 driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the saa7134finidev function in the driver drivers/media/pci/saa7134/saa7134-core.c file of the Philips SAA7134 kernel for the Linux operating system is related to the reutilization of a resource that was previously freed due to competitive access to the resource i.e., in a...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

Exploit for CVE-2022-46395 to run on FireTV 2nd gen Cube Thi...

Arm Mali GPU Kernel Driver < r43p0 Information Exposure (CVE-2023-26083)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r43p0 running on Migard, Bifrost, Valhall or 5th Gen architecture. It is, therefore, affected by an information disclosure vulnerability. A non-privileged user can make valid GPU processing operations that expose...

Windows 11 22h2 - Kernel Privilege Elevation Exploit

// Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation // country: Iran // Exploit Author: Amirhossein Bahramizadeh // Category : webapps // Vendor Homepage: // Tested on: Windows/Linux // CVE : CVE-2023-28293 include include // The vulnerable driver file name const char drivername =...

The vulnerability of the 6LoWPAN kernel driver of the RIOT operating system, which allows a hacker to cause a service failure.

The vulnerability of the 6LoWPAN kernel driver in the RIOT operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2021-0945

In PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-0701

In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

CVE-2021-0945

In PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Integer overflow

In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

Out-of-bounds

In PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-12017 · Imagination Technologies · Powervr Kernel Driver

Name of the Vulnerable Software and Affected Versions: PowerVR kernel driver affected versions not specified Description: The issue is related to a missing size check in the PVRSRVBridgeSyncPrimOpCreate function of the PowerVR kernel driver, which could lead to an integer overflow and out-of-boun...