← Back

CVE-2022-28348

nvd nist
Published: May 19, 2022Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.

Affected (3)

Arm
3 products
Bifrost Gpu Kernel Driver
Midgard Gpu Kernel Driver
Valhall Gpu Kernel Driver
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Bifrost Gpu Kernel Driver
r0p0 ≤ version ≤ r36p0
Midgard Gpu Kernel Driver
r4p0 ≤ version ≤ r31p0
Valhall Gpu Kernel Driver
r19p0 ≤ version ≤ r36p0

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.