CVE-2025-8045

CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...

Pixel_GPU_Exploit

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...

CVE-2022-22706-poc

CVE-2022-22706 - Page-Cache Write The Arm Mali GPU driver hands userspace a CPU-writable mapping of pages it pinned read-only, so an unprivileged process gets a writable alias of the page cache backing a file it can only open ORDONLY. exploit.c blanks root's password field in the /etc/passwd page...

CVE-2021-28663

CVE-2021-28663 Una fuga PoC básica para CVE-2021-28663 Detalles internos de la vulnerabilidad de puerta trasera del kernel de Android Esta es una PoC básica para CVE-2021-28663. Un fallo de diseño en el controlador del kernel de GPU Mali para Android. 1. Crear un GPUVA y también hacer mmap para...

CVE-2024-1065

CVE-2024-1065 — Page Cache Exploitation PoC Proof-of-concept exploit for CVE-2024-1065, a physical page use-after-free in the ARM Mali GPU kernel driver. The exploit demonstrates page cache exploitation : racing a freed MIGRATEMOVABLE page into the in-memory code image of a SUID binary, then...

CVE-2023-26083

CVE-2023-26083 – Mali GPU Kernel Address Leak via Timeline Stream This repository contains a proof-of-concept PoC exploit for CVE-2023-26083 , a vulnerability in the Mali GPU driver Arm Mali GPU Kernel Driver that allows an unprivileged user to leak kernel pointers and sensitive internal...

CVE-2026-12387 Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

CVE-2026-12387

A Use After Free vulnerability in Arm Ltd Bifrost, Valhall, and 5th Gen GPU Architecture Kernel Drivers allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. Affected version ranges: Bifrost r41p0–r49p5, r50p0–r51p0, r54p1–r54...

CVE-2026-12285 Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

CVE-2026-12285

CVE-2026-12285 is a Use After Free vulnerability in three Arm GPU kernel drivers: Bifrost , Valhall , and the Arm 5th Gen GPU Architecture kernel driver. A local non-privileged user process can perform valid GPU memory processing operations to access already freed memory, resulting in a low confi...

CVE-2026-11891

CVE-2026-11891 is a Use After Free vulnerability in the Arm Valhall GPU Userspace Driver and Arm 5th Gen GPU Architecture Userspace Driver , affecting versions r46p0 through r55p0 (specifically r46p0–r49p5, r50p0–r54p3, and r55p0). A non-privileged user process can trigger the bug by performing v...

CVE-2026-11891 Mali GPU Userspace Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...

CVE-2026-9040

CVE-2026-9040 is a race condition in Arm Ltd's Bifrost , Valhall , and 5th Gen GPU Architecture kernel drivers. A local non-privileged process can exploit improper GPU memory handling to cause a denial of service or disclose sensitive information (CVSS 3.1: 7.7 HIGH ). Affected driver versions sp...

CVE-2026-9040 Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information

A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose...

CVE-2026-9034

CVE-2026-9034 is a Use After Free vulnerability in Arm Ltd Mali GPU userspace drivers —specifically the Bifrost , Valhall , and Arm 5th Gen GPU Architecture userspace drivers. A non-privileged user process can perform valid GPU processing operations, including via WebGL or WebGPU , to access alre...

CVE-2026-9034 Mali GPU Userspace Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...

CVE-2026-7477 Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

CVE-2026-7477

CVE-2026-7477 is a Use After Free vulnerability in three Arm Mali GPU kernel drivers: Bifrost , Valhall , and 5th Gen GPU Architecture . A local non-privileged user process can perform valid GPU memory processing operations to access already freed memory, resulting in HIGH impact to confidentiali...

CVE-2026-7476 Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to access already freed memory. This issue affec...

CVE-2026-7476

CVE-2026-7476 is a Use After Free vulnerability in Arm's Mali GPU Kernel Drivers (Bifrost, Valhall, and Arm 5th Gen GPU Architecture). A local non-privileged process can perform improper GPU memory processing operations to access already-freed memory. Affected driver revisions span r49p3 through ...