Description
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 9 repositories
-
Pro-me3us/CVE_2022_38181_Raven ★ 12 · Apr 13, 2023
CVE-2022-38181 POC for FireTV 2nd gen Cube (raven)
-
ericpardee/fire-hd-ownership ★ 7 · Aug 20, 2026
Owning a tablet Amazon kept shutting down — CVE-2022-38181 write-up, four AI models, and a blog
-
Pro-me3us/CVE_2022_38181_Gazelle ★ 5 · Apr 13, 2023
CVE-2022-38181 POC for FireTV 3rd gen Cube (gazelle)
-
s1204IT/CVE-2022-38181 ★ 3 · Oct 29, 2026
-
R0rt1z2/CVE-2022-38181 ★ 3 · May 12, 2023
-
sber-portal/sberportal-root ★ 1 · Nov 10, 2026
SberPortal (stargate, Amlogic A311D) — getting and keeping root: CVE-2022-38181, persistent root via u-boot env, device-side auto adb root, BL31 secure-boot path
-
artur9010/amazon-mustang-hack ★ 1 · Sep 11, 2026
FireOS 7.3.3.1 temp root by CVE-2022-38181
-
lRENyaaa/AGM3-W09HN-TMP-ROOT-CVE-2022-38181 ★ 0 · Nov 5, 2026
在 AGM3-W09HN 上通过 CVE-2022-38181 取得临时Root
-
soralis0912/CVE-2022-38181-aristotle ★ 0 · Jul 25, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2023-0837 Android Patchday April 2023 BSI CERT-Bund (WID) · Apr 3, 2023
References
- https://developer.arm.com/support/arm-security-updates
- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
- https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/
- https://securitylab.github.com/advisories/GHSL-2022-054_Arm_Mali/
- http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html