Back to Database
Status published
Unknown
CVE-2021-28663
The Arm Mali GPU kernel driver allows privilege escalation or...
Vulnerability Description
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-28663
Credits & Attribution
No credits recorded in the NVD database.
References
More from arm
View All →CVE-2022-48251
The AES instructions on the ARMv8 platform do not have...
High
7.5
CVE-2022-46891
An issue was discovered in the Arm Mali GPU Kernel...
High
8.8
CVE-2022-46781
An issue was discovered in the Arm Mali GPU Kernel...
Unknown
0
CVE-2022-46396
An issue was discovered in the Arm Mali Kernel Driver....
Unknown
0
CVE-2022-46395
An issue was discovered in the Arm Mali GPU Kernel...
High
8.8
Affected Vendor
Affected Software
bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver
Vulnerable Versions:
r0p0, r4p0, r19p0
Timeline
Official Publish:
May 10th, 2021
Last Modified:
October 21st, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.