{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T21:47:37.879Z",
  "tag": {
    "id": "arm-mali",
    "label": "Arm Mali",
    "isStack": false,
    "url": "https://pwn.watch/t/arm-mali",
    "feed": "https://pwn.watch/t/arm-mali/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "arm-mali-gpu-kernel-driver-cve-2024-4610",
      "title": "Arm Mali GPU Kernel Driver Use-After-Free",
      "url": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610",
      "json": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Arm Mali GPU Kernel Driver",
      "tags": [
        "arm",
        "arm-mali",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4610"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-06-07",
      "closedAt": "2024-06-12",
      "updatedAt": "2024-06-12",
      "summary": "Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Added to the CISA KEV catalog on 2024-06-12.",
      "xPost": null
    },
    {
      "slug": "arm-mali-gpu-kernel-driver-cve-2023-4211",
      "title": "Arm Mali GPU Kernel Driver: Use-After-Free (CVE-2023-4211)",
      "url": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211",
      "json": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Arm Mali GPU Kernel Driver",
      "tags": [
        "arm",
        "cisa-kev",
        "arm-mali"
      ],
      "cveIds": [
        "CVE-2023-4211"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-10-03",
      "closedAt": "2023-10-03",
      "updatedAt": "2023-10-03",
      "summary": "Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Added to CISA KEV on 2023-10-03.",
      "xPost": null
    },
    {
      "slug": "arm-mali-graphics-processing-unit-gpu-cve-2023-26083",
      "title": "Arm Mali Graphics Processing Unit (GPU): Kernel Driver Information Disclosure (CVE-2023-26083)",
      "url": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083",
      "json": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083.json",
      "status": "closed",
      "severity": "low",
      "patchStatus": "patched",
      "product": "Arm Mali Graphics Processing Unit (GPU)",
      "tags": [
        "arm",
        "cisa-kev",
        "arm-mali"
      ],
      "cveIds": [
        "CVE-2023-26083"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-04-07",
      "closedAt": "2023-04-07",
      "updatedAt": "2023-04-07",
      "summary": "Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. Added to CISA KEV on 2023-04-07.",
      "xPost": null
    },
    {
      "slug": "arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181",
      "title": "Arm Mali Graphics Processing Unit (GPU): 2 exploited vulnerabilities (CVE-2022-22706, CVE-2022-38181)",
      "url": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181",
      "json": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Arm Mali Graphics Processing Unit (GPU)",
      "tags": [
        "arm",
        "cisa-kev",
        "arm-mali"
      ],
      "cveIds": [
        "CVE-2022-22706",
        "CVE-2022-38181"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-03-30",
      "closedAt": "2023-03-30",
      "updatedAt": "2023-03-30",
      "summary": "Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages. Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. Added to CISA KEV on 2023-03-30.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "arm-mali-gpu-kernel-driver-cve-2024-4610",
      "incidentTitle": "Arm Mali GPU Kernel Driver Use-After-Free",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-06-12",
      "title": "CISA added CVE-2024-4610 to the KEV catalog (federal deadline 2024-07-03)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610"
    },
    {
      "incident": "arm-mali-gpu-kernel-driver-cve-2024-4610",
      "incidentTitle": "Arm Mali GPU Kernel Driver Use-After-Free",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-06-07",
      "title": "CVE-2024-4610 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4610",
      "url": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2024-4610"
    },
    {
      "incident": "arm-mali-gpu-kernel-driver-cve-2023-4211",
      "incidentTitle": "Arm Mali GPU Kernel Driver: Use-After-Free (CVE-2023-4211)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-03",
      "title": "CISA added CVE-2023-4211 to the KEV catalog (due 2023-10-24).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/arm-mali-gpu-kernel-driver-cve-2023-4211"
    },
    {
      "incident": "arm-mali-graphics-processing-unit-gpu-cve-2023-26083",
      "incidentTitle": "Arm Mali Graphics Processing Unit (GPU): Kernel Driver Information Disclosure (CVE-2023-26083)",
      "severity": "low",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-04-07",
      "title": "CISA added CVE-2023-26083 to the KEV catalog (due 2023-04-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2023-26083"
    },
    {
      "incident": "arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181",
      "incidentTitle": "Arm Mali Graphics Processing Unit (GPU): 2 exploited vulnerabilities (CVE-2022-22706, CVE-2022-38181)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-30",
      "title": "CISA added CVE-2022-22706 to the KEV catalog (due 2023-04-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181"
    },
    {
      "incident": "arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181",
      "incidentTitle": "Arm Mali Graphics Processing Unit (GPU): 2 exploited vulnerabilities (CVE-2022-22706, CVE-2022-38181)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-30",
      "title": "CISA added CVE-2022-38181 to the KEV catalog (due 2023-04-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/arm-mali-graphics-processing-unit-gpu-cve-2022-22706-38181"
    }
  ]
}