CVE-2022-34830

CVSS V2 None CVSS V3 None
Description
An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory.
Overview
  • CVE ID
  • CVE-2022-34830
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-23T03:15:10
  • Last Modified Date
  • 2022-11-27T04:31:15
Weakness Enumerations
CWE URL
CWE-367 http://cwe.mitre.org/data/definitions/367.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:arm:utgard_gpu_kernel_driver:r11p0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:arm:utgard_gpu_kernel_driver:r12p0:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
https://developer.arm.com/support/arm-security-updates
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-34830
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34830
History
Created Old Value New Value Data Type Notes
2022-11-23 04:00:15 Added to TrackCVE
2022-12-07 18:00:54 2022-11-23T03:15Z 2022-11-23T03:15:10 CVE Published Date updated
2022-12-07 18:00:54 2022-11-27T04:31:15 CVE Modified Date updated
2022-12-07 18:00:54 Analyzed Vulnerability Status updated
2022-12-07 18:00:55 CWE-367 Weakness Enumeration new
2022-12-07 18:00:56 CPE Information updated