CVE-2022-28348: Use After Free
Published May 19, 2022
·Updated
Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows improper GPU memory operations to reach a use-after-free situation.
Affected Software
5 affected components
Arm Bifrost GPU Kernel Driver>=r0p0<=r36p0
Arm Midgard GPU Kernel Driver>=r4p0<=r31p0
Arm Valhall GPU Kernel Driver>=r19p0<=r36p0
Arm Midguard Gpu Kernel Driver>=r4p0<=r31p0
Google Android
Event History
May 19, 2022
CVE Published
via MITRE·01:01 AM
Data Sourced
via MITRE·01:01 AM
Description
Oct 2, 2023
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-28348?
The severity of CVE-2022-28348 is critical with a severity value of 9.8.
2
Which software is affected by CVE-2022-28348?
Google Android, Arm Bifrost Gpu Kernel Driver, Arm Midguard Gpu Kernel Driver, and Arm Valhall Gpu Kernel Driver are affected by CVE-2022-28348.
3
How can I fix CVE-2022-28348?
To fix CVE-2022-28348, it is recommended to apply the necessary security patches provided by the respective vendors.
4
Where can I find more information about CVE-2022-28348?
You can find more information about CVE-2022-28348 on the Android Security Bulletin for October 2023 and the Arm Security Center website.
5
What is the CWE ID of CVE-2022-28348?
The CWE ID of CVE-2022-28348 is 416.