Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Arm: actively exploited vulnerabilities

9 vulnerabilities in Arm products (Mali GPU (pilote noyau), Trusted Firmware) are in CISA’s catalog of exploited vulnerabilities. Last added: June 12, 2024.

Arm security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Arm category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Mali GPU (pilote noyau) 8 vulnerabilities · Phones and tablets
  • Trusted Firmware 1 vulnerability · Hardware and firmware

Name used by CISA: Arm. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Arm list.

  1. Rank 1Arm Mali GPU (pilote noyau)

    CVE-2021-29256

    CVE from 2021, added in 2023

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 7, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  2. Rank 2Arm Mali GPU (pilote noyau)

    CVE-2022-38181

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  3. Rank 3Arm Mali GPU (pilote noyau)

    CVE-2021-28663

    Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  4. Rank 4Arm Mali GPU (pilote noyau)

    CVE-2021-28664

    Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  5. Rank 5Arm Mali GPU (pilote noyau)

    CVE-2024-4610

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 12, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  6. Rank 6Arm Mali GPU (pilote noyau)

    CVE-2022-22706

    Arm Mali GPU Kernel Driver Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  7. Rank 7Arm Mali GPU (pilote noyau)

    CVE-2023-4211

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 3, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  8. Rank 8Arm Trusted Firmware

    CVE-2021-27562

    Arm Trusted Firmware Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)

  9. Rank 9Arm Mali GPU (pilote noyau)

    CVE-2023-26083

    Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 7, 2023
    CISA deadline
    21 days
    CVSS severity
    3.3 (low)

Follow and verify

Get new Arm vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.