High severity · published Mar 6, 2023
CVE-2022-46395
An issue was discovered in the Arm Mali GPU Kernel Driver
8.8
CVSS
2.7%
EPSS
No
On KEV
Description
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Avalon Gpu Kernel Driver · Arm
r41p0 · source: NVD
BG
Bifrost Gpu Kernel Driver · Arm
r0p0 through r41p0 · source: NVD
MG
Midgard Gpu Kernel Driver · Arm
r0p0 through r32p0 · source: NVD
VG
Valhall Gpu Kernel Driver · Arm
r19p0 through r41p0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46395
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46395
packetstormsecurity.com
http://packetstormsecurity.com/files/172855/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html
Vendor Advisory
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
Vendor Advisory
https://developer.arm.com/support/arm-security-updates
More from Avalon Gpu Kernel Driver
8.8
CVE-2022-46394
An issue was discovered in the Arm Mali GPU Kernel Driver
5.5
CVE-2023-28469
An issue was discovered in the Arm Mali GPU Kernel Driver
5.5
CVE-2023-28147
An issue was discovered in the Arm Mali GPU Kernel Driver
3.3
CVE-2022-46396
An issue was discovered in the Arm Mali Kernel Driver
3.3
CVE-2022-46781
An issue was discovered in the Arm Mali GPU Kernel Driver