Description
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 4 repositories
-
SmileTabLabo/CVE-2022-46395 ★ 2 · Jun 28, 2024
-
Pro-me3us/CVE_2022_46395_Gazelle ★ 1 · Jun 29, 2023
CVE-2022-46395 POC for FireTV 3rd gen Cube (gazelle)
-
Gao-Zuin/cve-2022-46395-qemu ★ 0 · Jun 5, 2026
-
Pro-me3us/CVE_2022_46395_Raven ★ 0 · Jun 29, 2023
CVE-2022-46395 POC for FireTV 2nd gen Cube (raven)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2023-1101 Google Android Patchday Mai 2023 BSI CERT-Bund (WID) · Sep 17, 2023
- WID-SEC-2023-1371 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 5, 2023