{"meta":{"title":"KEV entries: Arm","description":"All KEV entries for vendor Arm.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":9,"vendor":"Arm","entries":9,"shareOfCatalogPercent":0.5,"ransomwareKnown":0,"firstDateAdded":"2021-11-03","latestDateAdded":"2024-06-12","rank":28},"data":[{"cveID":"CVE-2024-4610","vendorProject":"Arm","product":"Mali GPU Kernel Driver","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2024-06-12","dueDate":"2024-07-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2024-4610","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-4610"},{"cveID":"CVE-2023-4211","vendorProject":"Arm","product":"Mali GPU Kernel Driver","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-10-03","dueDate":"2023-10-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2023-4211","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-4211"},{"cveID":"CVE-2021-29256","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-07-07","dueDate":"2023-07-28","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2021-29256","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2021-29256"},{"cveID":"CVE-2023-26083","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-401"],"shortDescription":"Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.","requiredAction":"Apply updates per vendor instructions.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2023-26083","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-26083"},{"cveID":"CVE-2022-38181","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.","requiredAction":"Apply updates per vendor instructions.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2022-38181","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2022-38181"},{"cveID":"CVE-2022-22706","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.","requiredAction":"Apply updates per vendor instructions.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2022-22706","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2022-22706"},{"cveID":"CVE-2021-28664","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28664","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-28664"},{"cveID":"CVE-2021-28663","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28663","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-28663"},{"cveID":"CVE-2021-27562","vendorProject":"Arm","product":"Trusted Firmware","vulnerabilityName":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27562","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-27562"}]}