CVE-2022-28348
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.
Arm Mali GPU Kernel Driver (versiones Midgard r4p0 hasta r31p0, Bifrost r0p0 hasta r36p0 antes de r37p0, y Valhall r19p0 hasta r36p0 antes de r37p0) permite que las operaciones de memoria de la GPU inapropiadas lleguen a una situación de uso de memoria previamente liberada
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-02 CVE Reserved
- 2022-05-19 CVE Published
- 2023-12-09 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities | 2023-12-13 | |
| https://developer.arm.com/support/arm-security-updates | 2023-12-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arm Search vendor "Arm" | Bifrost Gpu Kernel Driver Search vendor "Arm" for product "Bifrost Gpu Kernel Driver" | >= r0p0 <= r36p0 Search vendor "Arm" for product "Bifrost Gpu Kernel Driver" and version " >= r0p0 <= r36p0" | - |
Affected
| ||||||
| Arm Search vendor "Arm" | Midgard Gpu Kernel Driver Search vendor "Arm" for product "Midgard Gpu Kernel Driver" | >= r4p0 <= r31p0 Search vendor "Arm" for product "Midgard Gpu Kernel Driver" and version " >= r4p0 <= r31p0" | - |
Affected
| ||||||
| Arm Search vendor "Arm" | Valhall Gpu Kernel Driver Search vendor "Arm" for product "Valhall Gpu Kernel Driver" | >= r19p0 <= r36p0 Search vendor "Arm" for product "Valhall Gpu Kernel Driver" and version " >= r19p0 <= r36p0" | - |
Affected
| ||||||