Arm warns of actively exploited flaw in Mali GPU kernel drivers
ID: 2e8033b0-4049-58a7-a086-1571ec437970
STIX ID: report--2e8033b0-4049-58a7-a086-1571ec437970
Feed Name: Bleeping Computer
Threat Score
Arm disclosed CVE-2024-4610, a use-after-free vulnerability in Bifrost and Valhall Mali GPU kernel drivers (r34p0–r40p0) that can allow a local non-privileged user to access freed GPU memory and potentially achieve information disclosure or arbitrary code execution; the issue was fixed in r41p0 (released Nov 24, 2022) but has been reclassified and reported as exploited in the wild, and many devices may remain vulnerable due to slow OEM/carrier firmware rollouts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.