Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-22706
HistoryMar 03, 2022 - 3:15 p.m.

CVE-2022-22706

2022-03-0315:15:08
CWE-119
[email protected]
web.nvd.nist.gov
1

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.712 High

EPSS

Percentile

98.1%

JSON

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

Affected configurations

NVD
Node
armbifrostRanger0p0–r36p0
OR
armmidgardRanger26p0–r31p0
OR
armvalhallRanger19p0–r36p0

Related

nessus 1
cvelist 1
cve 1
ubuntucve 1
prion 1
attackerkb 1
cisa_kev 1
thn 3
googleprojectzero 2
github 1
nessus
nessus
ARM Mali GPU Kernel Driver < r32p0 / < r36p0 Improper Memory Access (CVE-2022-22706)
2023-07-11 00:00:00
cvelist
cvelist
CVE-2022-22706
2022-03-03 14:27:54
cve
cve
CVE-2022-22706
2022-03-03 15:15:08
ubuntucve
ubuntucve
CVE-2022-22706
2022-03-03 00:00:00
prion
prion
Design/Logic Flaw
2022-03-03 15:15:00
attackerkb
attackerkb
CVE-2022-22706
2022-03-03 00:00:00
cisa_kev
cisa_kev
Arm Mali GPU Kernel Driver Unspecified Vulnerability
2023-03-30 00:00:00
thn
thn
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
2024-06-11 06:37:00
Critical libwebp Vulnerability Under Active Exploitation - Gets Maximum CVSS Score
2023-09-27 05:23:00
Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices
2023-03-29 13:52:00
googleprojectzero
googleprojectzero
Mind the Gap
2022-11-22 00:00:00
Analyzing a Modern In-the-wild Android Exploit
2023-09-19 00:00:00
github
github
Pwning the all Google phone with a non-Google bug
2023-01-23 15:05:19

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.712 High

EPSS

Percentile

98.1%

JSON
Related for NVD:CVE-2022-22706
nessus1cvelist1cve1ubuntucve1prion1attackerkb1cisa_kev1thn3googleprojectzero2github1