Vendor
Arm: actively exploited vulnerabilities
9 vulnerabilities in Arm products are listed in CISA’s catalog of actively exploited vulnerabilities. Latest addition on June 12, 2024: CVE-2024-4610 (Mali GPU Kernel Driver).
- 9 exploited vulnerabilities in the catalog
- 0 added in the last 12 months
- 0 used by ransomware
- 3 products affected
Affected products
- Mali Graphics Processing Unit (GPU)6
- Mali GPU Kernel Driver2
- Trusted Firmware1
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2024 1 vulnerability
-
CVE-2024-4610Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
2023 5 vulnerabilities
-
CVE-2023-4211Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
-
CVE-2021-29256Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
-
CVE-2023-26083Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
-
CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
-
CVE-2022-22706Arm Mali GPU Kernel Driver Unspecified Vulnerability
2021 3 vulnerabilities
-
CVE-2021-28664Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
-
CVE-2021-28663Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
-
CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.