Use-After-Free Vulnerability in Arm Mali GPU Driver
CVE-2022-46891

8.8HIGH

Key Information:

Vendor

Arm
Status
Valhall
Bifrost
Midgard
Vendor
CVE Published:
17 January 2023

What is CVE-2022-46891?

An issue has been identified in the Arm Mali GPU Kernel Driver that allows non-privileged users to manipulate GPU processing operations improperly. This vulnerability arises from a use-after-free condition, enabling access to previously freed memory, which can lead to significant security risks if exploited. The driver versions affected span several generations of the Mali architecture, specifically impacting Midgard, Bifrost, and Valhall series from various versions. It's crucial for users and administrators to apply necessary mitigations promptly.

References

https://developer.arm.com/Arm%20Security%20Center/Mali%20...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-46891 : Use-After-Free Vulnerability in Arm Mali GPU Driver