CVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

An unspecified vulnerability in the Arm Mali Graphics Processing Unit (GPU) kernel driver allows a non-privileged user to gain write access to read-only memory, escalate to root privileges, corrupt memory, and modify other processes' memory. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided.

• CWE-787Out-of-bounds Write (opens in a new tab)

• nvd.nist.gov/vuln/detail/CVE-2021-28664 (opens in a new tab)
• cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2021-28664 (opens in a new tab)

• CVE-2021-28663: Arm Mali Graphics Processing Unit (GPU) Use-After-Free VulnerabilityHighVulnerability11/03/2021
• CVE-2021-27562: Arm Trusted Firmware Out-of-Bounds Write VulnerabilityHighVulnerability11/03/2021
• CVE-2022-22706: Arm Mali GPU Kernel Driver Unspecified VulnerabilityHighVulnerability03/30/2023
• CVE-2022-38181: Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityHighVulnerability03/30/2023
• CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityHighVulnerability07/07/2023