Vulnerabilities > CVE-2022-36449 - Use After Free vulnerability in ARM products

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

arm

CWE-416

NVD

Published: 2022-09-01

Updated: 2025-04-07

Summary

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0, Bifrost r0p0 through r38p0 and r39p0 before r38p1, and Valhall r19p0 through r38p0 and r39p0 before r38p1.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Valhall GPU Kernel Driver R39P0 ARM Valhall GPU Kernel Driver R19P0 ARM Valhall GPU Kernel Driver R19P0-01Eac0 ARM Valhall GPU Kernel Driver R25P0 ARM Valhall GPU Kernel Driver R26P0 ARM Valhall GPU Kernel Driver R28P0 ARM Valhall GPU Kernel Driver R29P0 ARM Valhall GPU Kernel Driver R30P0 ARM Valhall GPU Kernel Driver R30P0-01Eac0 ARM Valhall GPU Kernel Driver R34P0 ARM Valhall GPU Kernel Driver R35P0 ARM Valhall GPU Kernel Driver R36P0 ARM Valhall GPU Kernel Driver R37P0 ARM Valhall GPU Kernel Driver R38P0 ARM Bifrost GPU Kernel Driver R39P0 ARM Bifrost GPU Kernel Driver R0P0 ARM Bifrost GPU Kernel Driver R1P0 ARM Bifrost GPU Kernel Driver R7P0 ARM Bifrost GPU Kernel Driver R11P0 ARM Bifrost GPU Kernel Driver R16P0 ARM Bifrost GPU Kernel Driver R16P0-01Eac0 ARM Bifrost GPU Kernel Driver R17P0 ARM Bifrost GPU Kernel Driver R19P0 ARM Bifrost GPU Kernel Driver R25P0 ARM Bifrost GPU Kernel Driver R26P0 ARM Bifrost GPU Kernel Driver R28P0 ARM Bifrost GPU Kernel Driver R29P0 ARM Bifrost GPU Kernel Driver R30P0 ARM Bifrost GPU Kernel Driver R30P0-01Eac0 ARM Bifrost GPU Kernel Driver R34P0 ARM Bifrost GPU Kernel Driver R35P0 ARM Bifrost GPU Kernel Driver R36P0 ARM Bifrost GPU Kernel Driver R38P0 ARM Midgard GPU Kernel Driver R4P0 ARM Midgard GPU Kernel Driver R8P0 ARM Midgard GPU Kernel Driver R12P0 ARM Midgard GPU Kernel Driver R13P0 ARM Midgard GPU Kernel Driver R19P0 ARM Midgard GPU Kernel Driver R26P0 ARM Midgard GPU Kernel Driver R28P0 ARM Midgard GPU Kernel Driver R28P0-01Eac0 ARM Midgard GPU Kernel Driver R29P0 ARM Midgard GPU Kernel Driver R30P0 ARM Midgard GPU Kernel Driver R30P0-01Eac0 ARM Midgard GPU Kernel Driver R31P0 ARM Midgard GPU Kernel Driver R32P0	46

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Vulnerabilities > CVE-2022-36449 - Use After Free vulnerability in ARM products

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Related news

References