CVE-2022-46891
published 2023-01-17CVE-2022-46891: An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain…
PriorityP348high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.81%
52.2th percentile
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40p0.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arm | bifrost_gpu_kernel_driver | r1p0 – r40p0 | — |
| arm | midgard_gpu_kernel_driver | r13p0 – r32p0 | — |
| arm | valhall_gpu_kernel_driver | r19p0 – r40p0 | — |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2022-46891: Mali
vendor_android·2023-05-01·CVSS 8.8
CVE-2022-46891 [HIGH] CVE-2022-46891: Mali
Android Security Bulletin 2023-05-01
CVE: CVE-2022-46891
Severity: HIGH
Component: Mali
References: A-260149319
*
GHSA
GHSA-394q-589m-ppr4: An issue was discovered in the Arm Mali GPU Kernel Driver
ghsa_unreviewed·2023-01-17
CVE-2022-46891 [HIGH] CWE-416 GHSA-394q-589m-ppr4: An issue was discovered in the Arm Mali GPU Kernel Driver
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40p0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-01-17
Published