PT-2023-14927 · Arm · Arm Mali Gpu Kernel Driver

Publicado 2023-03-06 · Atualizado 2023-12-13 · CVE-2022-46395

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions Midgard r0p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r41p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r41p0 Arm Mali GPU Kernel Driver version Avalon r41p0

Description A non-privileged user can make improper GPU processing operations to gain access to already freed memory.

Recommendations For versions Midgard r0p0 through r32p0, update to a version after r32p0. For versions Bifrost r0p0 through r41p0, update to version r42p0 or later. For versions Valhall r19p0 through r41p0, update to version r42p0 or later. For version Avalon r41p0, update to version r42p0 or later.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ASB-A-267357916

CVE-2022-46395

Produtos afetados

Arm Mali Gpu Kernel Driver

Referências · 9

• https://osv.dev/vulnerability/CVE-2022-46395 · Aviso do Fabricante
• http://packetstormsecurity.com/files/172855/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html · Nota
• https://source.android.com/security/bulletin/2023-05-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-46395 · Nota de Segurança
• https://t.me/cibsecurity/59479 · Publicação no Telegram
• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Aviso do Fabricante
• https://developer.arm.com/support/arm-security-updates · Aviso do Fabricante
• https://t.me/freedomf0x/19832 · Publicação no Telegram
• https://osv.dev/vulnerability/ASB-A-267357916 · Aviso do Fabricante