Vulnerabilities > CVE-2021-44828 - Out-of-bounds Write vulnerability in ARM products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

arm

CWE-787

NVD

Published: 2022-01-14

Updated: 2023-12-13

Summary

Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privileged user to achieve write access to read-only memory, and possibly obtain root privileges, corrupt memory, and modify the memory of other processes.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Bifrost GPU Kernel Driver R0P0 ARM Bifrost GPU Kernel Driver R17P0 ARM Bifrost GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R34P0 ARM Midgard GPU Kernel Driver R26P0 ARM Midgard GPU Kernel Driver R29P0 ARM Midgard GPU Kernel Driver R30P0	9

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver