← Back to browse · API

CVE-2021-28663

Severity
HIGH
CVSS
8.8
EPSS
0.12084
Risk score
64.43
CISA KEV
Yes
PoC
No
Published
2021-05-10
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2021-15327, GHSA-2RC2-892P-6HC2
Products
Arm:Mali Graphics Processing Unit (GPU), n/a:n/a n/a
Sources
cisa.gov CVE-2021-28663
euvd EUVD-2021-15327

Description

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.

References