Published: 10/05/2021 Updated: 13/12/2023

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
arm bifrost gpu kernel driver
arm valhall gpu kernel driver
arm midgard gpu kernel driver

A basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability) This is a basic PoC for CVE-2021-28663 A design flaw in Mali GPU Android Kernel Driver Create a GPU_VA and also mmap to it so we can get virtual addr for phys pages Create an alias for phy pages, but don't do mmap so gpu_mapping remains as 1 Change flags of GPU_VA

CWE-416 https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver https://developer.arm.com/support/arm-security-updates https://github.com/lntrx/CVE-2021-28663 https://nvd.nist.gov https://github.com/lntrx/CVE-2021-28663

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-28663

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect