{"id":"CVE-2022-22706","aliases":["A-225040268","ASB-A-225040268","EUVD-2022-27849","GHSA-fjww-grc5-6wh6"],"status":"published","title":"An Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function.","description":"Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01062,"percentile":0.64829,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-119"],"published":"2022-03-03T14:27:54Z","modified":"2026-10-30T16:11:27Z","kev":{"date_added":"2023-03-30","due_date":"2023-04-20","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2023-03-30"},{"source":"kev","since":"2023-03-30"}],"exploits":[{"source":"pocgithub","id":"byt3quester/CVE-2022-22706-poc","title":"byt3quester/CVE-2022-22706-poc","date":"2026-07-31","url":"https://github.com/byt3quester/CVE-2022-22706-poc"},{"source":"pocgithub","id":"BennyWaitWhat/Sony-XBR-65X850D","title":"BennyWaitWhat/Sony-XBR-65X850D","date":"2026-10-18","url":"https://github.com/BennyWaitWhat/Sony-XBR-65X850D"}],"fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2023-06-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2023-06-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"arm","product":"bifrost_gpu_kernel_driver"},{"vendor":"arm","product":"mali graphics processing unit (gpu)"},{"vendor":"arm","product":"midgard_gpu_kernel_driver"},{"vendor":"arm","product":"valhall_gpu_kernel_driver"}],"references":[{"url":"https://developer.arm.com/support/arm-security-updates","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22706","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22706"},{"url":"https://github.com/advisories/GHSA-fjww-grc5-6wh6"},{"url":"https://source.android.com/security/bulletin/2023-06-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-22706","description":"Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.","status":"published","published":"2022-03-03T14:27:54Z","modified":"2025-10-21T23:15:44.955Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-27849","description":"Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.","status":"published","published":"2022-03-03T14:27:54Z","modified":"2025-10-21T23:15:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2023-03-30","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-fjww-grc5-6wh6","title":"An Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function.","description":"An Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function.","status":"published","published":"2022-03-04T00:00:18Z","modified":"2025-10-22T00:32:30Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2022-22706","title":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","description":"Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.","cwes":["CWE-119"],"kev":{"date_added":"2023-03-30","due_date":"2023-04-20","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2022-22706","description":"Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.","status":"published","published":"2022-03-03T15:15:08.61Z","modified":"2026-06-17T04:28:50.043Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:07:12.711288Z"}],"osv":[{"id":"ASB-A-225040268","status":"published","published":"2023-06-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:14.774652Z"}]}}