Threat database

CVE-2022-22706 is a high-severity vulnerability in the Arm Mali GPU Kernel Driver that allows a non-privileged user to gain write access to read-only memory pages. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.

CVE-2022-38181 is a use-after-free vulnerability in the Arm Mali GPU Kernel Driver. This flaw may allow a non-privileged user to gain root privileges or disclose sensitive information. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2021-27562 is an out-of-bounds write vulnerability in Arm Trusted Firmware that allows the non-secure world to cause a system halt, overwrite secure data, or leak secure data by invoking secure functions under the non-secure processing environment handler mode. It affects Yealink Device Management servers. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

CVE-2021-28663 is a use-after-free vulnerability in the Arm Mali Graphics Processing Unit (GPU) kernel driver. This flaw allows a non-privileged user to perform improper operations on GPU memory, potentially leading to privilege escalation to root or information disclosure. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

An unspecified vulnerability in the Arm Mali Graphics Processing Unit (GPU) kernel driver allows a non-privileged user to gain write access to read-only memory, escalate to root privileges, corrupt memory, and modify other processes' memory. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided.