CVE-2022-36449

Katalog CVE

CVSS 6.5 · Medium EPSS 1,2%

Kerentanan Use After Free pada arm bifrost gpu kernel driver, arm midgard gpu kernel driver +1 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0, Bifrost r0p0 through r38p0 and r39p0 before r38p1, and Valhall r19p0 through r38p0 and r39p0 before r38p1.

Rincian

Terbit di NVD

1 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities advisory vendor
• http://packetstormsecurity.com/files/168431/Arm-Mali-Released-Buffer-Use-After-Free.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/168432/Arm-Mali-Physical-Address-Exposure.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/168433/Arm-Mali-Race-Condition.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/168434/Arm-Mali-CSF-Missing-Buffer-Size-Check.html advisory pihak ketiga · vdb entry