PT-2023-14928 · Arm · Arm Mali Gpu Kernel Driver

Published 2023-04-11 · Updated 2025-02-11 · CVE-2022-46396

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Arm Mali Kernel Driver versions Valhall r29p0 through r41p0 Arm Mali Kernel Driver versions Avalon r41p0 before r42p0

Description An issue was discovered in the Arm Mali Kernel Driver, allowing a non-privileged user to make improper GPU memory processing operations to access a limited amount outside of buffer bounds.

Recommendations For versions Valhall r29p0 through r41p0, update to version r42p0 or later to resolve the issue. For versions Avalon r41p0 before r42p0, update to version r42p0 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ASB-A-259984805

CVE-2022-46396

Affected Products

Arm Mali Gpu Kernel Driver

References · 5

• https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-46396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46396 · Security Note
• https://t.me/cibsecurity/61930 · Telegram Post
• https://t.me/cvenotify/110898 · Telegram Post