// For flags

CVE-2022-34830

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory.

Una familia de productos Arm hasta el 29 de junio de 2022 tiene una condición de ejecución TOCTOU que permite a usuarios sin privilegios realizar operaciones de procesamiento de GPU incorrectas para obtener acceso a la memoria ya liberada.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-06-29 CVE Reserved
  • 2022-11-23 CVE Published
  • 2024-06-15 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Arm
Search vendor "Arm"
 Utgard Gpu Kernel Driver
Search vendor "Arm" for product "Utgard Gpu Kernel Driver"
 r11p0
Search vendor "Arm" for product "Utgard Gpu Kernel Driver" and version "r11p0"
-
Affected
Arm
Search vendor "Arm"
 Utgard Gpu Kernel Driver
Search vendor "Arm" for product "Utgard Gpu Kernel Driver"
 r12p0
Search vendor "Arm" for product "Utgard Gpu Kernel Driver" and version "r12p0"
-
Affected