Vulnerability · Published Sep 1, 2022 · Assigned by mitre
CVE-2022-36449
Medium 6.5
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.2%top 31.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0, Bifrost r0p0 through r38p0 and r39p0 before r38p1, and Valhall r19p0 through r38p0 and r39p0 before r38p1.
Affected products (as reported)
References
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities x_refsource_MISC
- http://packetstormsecurity.com/files/168432/Arm-Mali-Physical-Address-Exposure.html x_refsource_MISC
- http://packetstormsecurity.com/files/168431/Arm-Mali-Released-Buffer-Use-After-Free.html x_refsource_MISC
- http://packetstormsecurity.com/files/168434/Arm-Mali-CSF-Missing-Buffer-Size-Check.html x_refsource_MISC
- http://packetstormsecurity.com/files/168433/Arm-Mali-Race-Condition.html x_refsource_MISC