What is CVE-2022-46396?

CVE-2022-46396 is an issue discovered in the Arm Mali Kernel Driver, which allows a non-privileged user to make improper GPU memory processing operations and access a limited amount outside of buffer bounds.

Which software is affected by CVE-2022-46396?

CVE-2022-46396 affects Google Android devices running Arm Mali Graphics Processing Unit (GPU) drivers Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.

What is the severity of CVE-2022-46396?

The severity of CVE-2022-46396 is high with a CVSS score of 3.3.

How can CVE-2022-46396 be fixed?

To fix CVE-2022-46396, users should update their Arm Mali Kernel Driver to version r42p0 or later.

Where can I find more information about CVE-2022-46396?

You can find more information about CVE-2022-46396 in the Android Security Bulletin for May 2023 and the Arm Security Center's documentation on Mali GPU Driver Vulnerabilities.

Vulnerability/
CVE-2022-46396

low

3.3

CWE

119

11/4/2023

26/8/2024

CVE-2022-46396: Buffer Overflow

First published: Tue Apr 11 2023(Updated: )

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Google Android
Arm Avalon Gpu Kernel Driver	=r41p0
Arm Valhall Gpu Kernel Driver	>=r29p0<=r41p0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2022-46396?
CVE-2022-46396 is an issue discovered in the Arm Mali Kernel Driver, which allows a non-privileged user to make improper GPU memory processing operations and access a limited amount outside of buffer bounds.
Which software is affected by CVE-2022-46396?
CVE-2022-46396 affects Google Android devices running Arm Mali Graphics Processing Unit (GPU) drivers Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.
What is the severity of CVE-2022-46396?
The severity of CVE-2022-46396 is high with a CVSS score of 3.3.
How can CVE-2022-46396 be fixed?
To fix CVE-2022-46396, users should update their Arm Mali Kernel Driver to version r42p0 or later.
Where can I find more information about CVE-2022-46396?
You can find more information about CVE-2022-46396 in the Android Security Bulletin for May 2023 and the Arm Security Center's documentation on Mali GPU Driver Vulnerabilities.

agent/type
agent/first-publish-date
agent/severity
agent/weakness
agent/references
agent/author
agent/description
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
agent/softwarecombine
agent/tags
collector/android-source
source/Android
agent/software-canonical-lookup
agent/last-modified-date
collector/mitre-cve
source/MITRE
vendor/arm
canonical/arm avalon gpu kernel driver
version/arm avalon gpu kernel driver/r41p0
canonical/arm valhall gpu kernel driver
version/arm valhall gpu kernel driver/r29p0
version/arm valhall gpu kernel driver/r41p0
vendor/google
canonical/google android

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.