Vendor

Arm

9 of 9 Arm CVEs in Patchfirst (100%) are in of vulnerabilities exploited in the wild.

CVEs: 9
In CISA KEV: 9100%
Known ransomware use: 0
Median days to KEV: 162; from publication
Latest KEV listing: 12 Jun 2024

Watch Arm Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Mali Graphics Processing Unit (GPU) In KEV: 6 CVEs: 6
Mali GPU Kernel Driver In KEV: 2 CVEs: 2
Trusted Firmware In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Arm CVEs

TechniqueCVEs
T1068Exploitation for Privilege Escalation CVEs: 9
T1005Data from Local System CVEs: 4
T1499.004Application or System Exploitation CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/arm.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Arm CVEs linked to the technique. Each link’s provenance is on the CVE page.

Arm CVEs

9 CVEs, by priority

CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitHigh · 8.8T1068Exploitation for Privilege Escalation T1005Data from Local System
18.5%Top 2.8%
68.6priority
CVE-2021-28663Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitHigh · 8.8T1068Exploitation for Privilege Escalation
12.1%Top 3.9%
68.4priority
CVE-2021-28664Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitHigh · 8.8T1068Exploitation for Privilege Escalation
5.4%Top 7.3%
67.7priority
CVE-2021-29256Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali Graphics Processing Unit (GPU)KEVHigh · 8.8T1068Exploitation for Privilege Escalation T1005Data from Local System
3.0%Top 13%
61.6priority
CVE-2022-22706Arm Mali GPU Kernel Driver Unspecified Vulnerability
Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
1.1%Top 35%
61.4priority
CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability
Arm · Trusted FirmwareKEVMedium · 5.5T1068Exploitation for Privilege Escalation T1499.004Application or System Exploitation
3.1%Top 12%
59.4priority
CVE-2023-26083Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitLow · 3.3T1068Exploitation for Privilege Escalation T1005Data from Local System
1.2%Top 31%
59.0priority
CVE-2023-4211Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali GPU Kernel DriverKEVMedium · 5.5T1068Exploitation for Privilege Escalation T1005Data from Local System
1.1%Top 34%
55.0priority
CVE-2024-4610Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali GPU Kernel DriverKEVHigh · 7.8T1068Exploitation for Privilege Escalation
0.8%Top 45%
54.5priority