Vulnerabilities > CVE-2022-28348 - Use After Free vulnerability in ARM products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

arm

CWE-416

critical

NVD

Published: 2022-05-19

Updated: 2024-11-21

Summary

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Bifrost GPU Kernel Driver R0P0 ARM Bifrost GPU Kernel Driver R17P0 ARM Bifrost GPU Kernel Driver R34P0 ARM Bifrost GPU Kernel Driver R35P0 ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R35P0 ARM Midgard GPU Kernel Driver R4P0 ARM Midgard GPU Kernel Driver R8P0 ARM Midgard GPU Kernel Driver R26P0 ARM Midgard GPU Kernel Driver R29P0 ARM Midgard GPU Kernel Driver R30P0 ARM Midgard GPU Kernel Driver R31P0	14

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References