CVE-2022-28350: Use After Free
Published May 19, 2022
·Updated
Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.
Affected Software
2 affected components
Arm Valhall GPU Kernel Driver>=r29p0<=r36p0
Google Android
Event History
May 19, 2022
CVE Published
via MITRE·01:04 AM
Data Sourced
via MITRE·01:04 AM
Description
Frequently Asked Questions
1
What is CVE-2022-28350?
CVE-2022-28350 is a vulnerability in Arm Mali GPU Kernel Driver that allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.
2
Who is affected by CVE-2022-28350?
Users of Arm Mali GPU Kernel Driver versions Valhall r29p0 through r36p0 before r37p0 are affected by CVE-2022-28350.
3
What is the severity of CVE-2022-28350?
CVE-2022-28350 has a severity rating of 9.8 (Critical).
4
How can I fix CVE-2022-28350?
To fix CVE-2022-28350, users should update their Arm Mali GPU Kernel Driver to version r37p0 or later.
5
Where can I find more information about CVE-2022-28350?
You can find more information about CVE-2022-28350 in the Android Security Bulletin for July 2023 and the Arm Security Center.