Firetruck

CVE-2021-28663

KEV

Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

View CVE record →
Vendor / Project
Arm
Product
Mali Graphics Processing Unit (GPU)
Date added
Nov 3, 2021
Due date
Nov 17, 2021
Known ransomware use
Unknown
CWEs
CWE-416

Description

Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.

Required action

Apply updates per vendor instructions.

Notes