{"schema_version":"1","data":[{"id":3516,"advisory_id":"c7524589-dfb0-42ff-b463-e51d74d1c63e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28663","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:22.430151+00:00","extraction_method":"structured","technologies":["core-kev","mali-graphics-processing-unit-gpu"],"cve_ids":["CVE-2021-28663"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","summary":"Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28663","products":[{"name":{"value":"Mali Graphics Processing Unit (GPU)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28663","aliases":["CVE-2021-28663"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-28663","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28663","dueDate":"2021-11-17","product":"Mali Graphics Processing Unit (GPU)","dateAdded":"2021-11-03","vendorProject":"Arm","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28663","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3515,"advisory_id":"56a30547-973b-4ef3-b540-f07139ba90c0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28664","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:21.862075+00:00","extraction_method":"structured","technologies":["core-kev","mali-graphics-processing-unit-gpu"],"cve_ids":["CVE-2021-28664"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","summary":"Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28664","products":[{"name":{"value":"Mali Graphics Processing Unit (GPU)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28664","aliases":["CVE-2021-28664"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-28664","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28664","dueDate":"2021-11-17","product":"Mali Graphics Processing Unit (GPU)","dateAdded":"2021-11-03","vendorProject":"Arm","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28664","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1359,"advisory_id":"19081fc7-610f-4194-8e90-fa2ee26aebd5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22706","source_published_at":"2023-03-30T00:00:00+00:00","published_at":"2026-10-24T21:01:39.162465+00:00","extraction_method":"structured","technologies":["core-kev","mali-graphics-processing-unit-gpu"],"cve_ids":["CVE-2022-22706"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","summary":"Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-22706","products":[{"name":{"value":"Mali Graphics Processing Unit (GPU)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-22706","aliases":["CVE-2022-22706"],"affected":[],"modified":"2023-03-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2022-22706","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2022-22706","dueDate":"2023-04-20","product":"Mali Graphics Processing Unit (GPU)","dateAdded":"2023-03-30","vendorProject":"Arm","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.","vulnerabilityName":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-22706","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1358,"advisory_id":"94f71dbb-59bd-4437-82ab-3bc2b41df0f1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38181","source_published_at":"2023-03-30T00:00:00+00:00","published_at":"2026-10-24T21:01:38.544225+00:00","extraction_method":"structured","technologies":["core-kev","mali-graphics-processing-unit-gpu"],"cve_ids":["CVE-2022-38181"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","summary":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-38181","products":[{"name":{"value":"Mali Graphics Processing Unit (GPU)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-38181","aliases":["CVE-2022-38181"],"affected":[],"modified":"2023-03-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-38181","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2022-38181","dueDate":"2023-04-20","product":"Mali Graphics Processing Unit (GPU)","dateAdded":"2023-03-30","vendorProject":"Arm","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-38181","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1351,"advisory_id":"98c3a579-52b6-4917-a462-fbad1042cc69","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26083","source_published_at":"2023-04-07T00:00:00+00:00","published_at":"2026-10-24T21:01:33.077737+00:00","extraction_method":"structured","technologies":["core-kev","mali-graphics-processing-unit-gpu"],"cve_ids":["CVE-2023-26083"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","summary":"Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-26083","products":[{"name":{"value":"Mali Graphics Processing Unit (GPU)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-26083","aliases":["CVE-2023-26083"],"affected":[],"modified":"2023-04-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-401"],"cveID":"CVE-2023-26083","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2023-26083","dueDate":"2023-04-28","product":"Mali Graphics Processing Unit (GPU)","dateAdded":"2023-04-07","vendorProject":"Arm","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.","vulnerabilityName":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-26083","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1292,"advisory_id":"bbe8cb49-f7c4-457f-8dbc-069eb20ebb88","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-29256","source_published_at":"2023-07-07T00:00:00+00:00","published_at":"2026-10-24T20:59:16.320438+00:00","extraction_method":"structured","technologies":["core-kev","mali-graphics-processing-unit-gpu"],"cve_ids":["CVE-2021-29256"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","summary":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","evidence":"kev:CVE-2021-29256","products":[{"name":{"value":"Mali Graphics Processing Unit (GPU)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-29256","aliases":["CVE-2021-29256"],"affected":[],"modified":"2023-07-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-29256","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2021-29256","dueDate":"2023-07-28","product":"Mali Graphics Processing Unit (GPU)","dateAdded":"2023-07-07","vendorProject":"Arm","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","known_exploited":true,"shortDescription":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-29256","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3516,"next_before":1292}