Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-38181

Description

The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.

POC

Reference

- http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html

- https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

- https://developer.arm.com/support/arm-security-updates

- https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/

Github

- https://github.com/1337eng/arm_mali_open_source_drivers

- https://github.com/Bariskizilkaya/CVE_2022_38181-Mali-SAMSUNG-S6-Lite-Tablet

- https://github.com/IdanBanani/Linux-Kernel-VR-Exploitation

- https://github.com/NetKingJ/awesome-android-security

- https://github.com/Ostorlab/KEV

- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

- https://github.com/Pro-me3us/CVE_2022_38181_Gazelle

- https://github.com/Pro-me3us/CVE_2022_38181_Raven

- https://github.com/R0rt1z2/CVE-2022-38181

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/plzheheplztrying/cve_monitor

- https://github.com/xairy/linux-kernel-exploitation