CVE-2021-28663

CVE-2021-28663 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including lntrx.

AI-analyzed exploit summary This repository contains a functional PoC exploit for CVE-2021-28663, a design flaw in the Mali GPU Android Kernel Driver. The exploit demonstrates an information leak by manipulating GPU memory mappings to achieve read-only access to kernel memory from user space.

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.