Arm vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Arm products: 33 record(s), with severity, exploitation and fixes.

Valhall GPU Kernel Driver 19 Bifrost GPU Kernel Driver 14 Arm 5th Gen GPU Architecture Kernel Driver 13 Midgard GPU Kernel Driver 7 Mbed Tls 7 Neoverse N2 Firmware 2 Tf-psa-crypto 2 Cortex-x2 Firmware 2 Cortex-a710 Firmware 2 Valhall GPU Userspace Driver 2 Arm 5th Gen GPU Architecture Userspace Driver 2 Cortex-a 1 C1 Pro 1 Neoverse-v3ae Firmware 1 Neoverse-v3 Firmware 1 Neoverse-v2 Firmware 1 Cortex-x925 Firmware 1 Cortex-x4 Firmware 1 Cortex-x3 Firmware 1 C1-premium Firmware 1 C1-ultra Firmware 1 Arm GNU Toolchain 1 C1-pro Firmware 1 Bifrost GPU Userspace Driver 1 Cortex-a76 Firmware 1 Cortex-r7 Firmware 1 Cortex-r8 Firmware 1 Cortex-a57 Firmware 1 Cortex-a65 Firmware 1 Cortex-a65ae Firmware 1 Cortex-a72 Firmware 1 Cortex-a73 Firmware 1 Cortex-a75 Firmware 1 Neoverse N1 Firmware 1 Cortex-a76ae Firmware 1 Cortex-a77 Firmware 1 Cortex-a78 Firmware 1 Cortex-a78ae Firmware 1 Cortex-x1 Firmware 1 Neoverse-e1 Firmware 1

Exploited only (KEV) →

CVE-2023-26083 Low · 3.3 KEV High · 51 Public exploit CWE-401 Apr 6, 2023

Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

CVE-2022-38181 High · 8.8 KEV High · 61 Public exploit CWE-416 Oct 25, 2022

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

CVE-2022-23960 Medium · 5.6 Mar 12, 2022

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict…

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.

CVE-2022-22706 High · 7.8 KEV High · 57 Public exploit CWE-119 Mar 3, 2022

Arm Mali GPU Kernel Driver Unspecified Vulnerability

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

CVE-2021-29256 High · 8.8 KEV High · 54 CWE-416 May 24, 2021

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

CVE-2021-28663 High · 8.8 KEV High · 61 Public exploit CWE-416 May 10, 2021

Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.

CVE-2021-28664 High · 8.8 KEV High · 61 Public exploit CWE-787 May 10, 2021

Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

CVE-2017-5754 Medium · 5.6 CWE-200 Jan 4, 2018

Exposure of Sensitive Information in Intel Atom C

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.