CVE-2022-28348

published 2022-05-19

CVE-2022-28348: Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper…

Priority P3 43 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
arm	bifrost_gpu_kernel_driver	r0p0 – r36p0	—
arm	midgard_gpu_kernel_driver	r4p0 – r31p0	—
arm	valhall_gpu_kernel_driver	r19p0 – r36p0	—
google	android	—	—

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-416