Known exploited vulnerabilities

Arm vulnerabilities attackers have used

Every Arm vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 9 Arm vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2024-4610, added Jun 12, 2024. Mali Graphics Processing Unit (GPU) has the most entries (6).

In KEV, all time
9
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

Mali Graphics Processing Unit (GPU) (6), Mali GPU Kernel Driver (2), Trusted Firmware (1).

Every Arm entry in CISA KEV

  1. CVE-2024-4610

    Added · due

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

  2. CVE-2023-4211

    Added · due

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

  3. CVE-2021-29256

    Added · due

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

  4. CVE-2023-26083

    Added · due

    Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

    Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

  5. CVE-2022-38181

    Added · due

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

  6. CVE-2022-22706

    Added · due

    Arm Mali GPU Kernel Driver Unspecified Vulnerability

    Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.

  7. CVE-2021-28664

    Added · due

    Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

    Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other…

  8. CVE-2021-28663

    Added · due

    Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

    Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.

  9. CVE-2021-27562

    Added · due

    Arm Trusted Firmware Out-of-Bounds Write Vulnerability

    Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.