Exploitation Summary
CVE-2022-38181 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 30, 2023. EIP tracks 3 public exploits from researchers including Pro-me3us, R0rt1z2.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-38181, targeting the ARM Mali GPU kernel driver on Amazon FireTV 2nd gen Cube. The exploit leverages a use-after-free vulnerability to achieve arbitrary kernel code execution, disabling SELinux and gaining root access.
Description
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
Exploits (3)
This repository contains a functional exploit for CVE-2022-38181, targeting the ARM Mali GPU kernel driver on Amazon FireTV 2nd gen Cube. The exploit leverages a use-after-free vulnerability to achieve arbitrary kernel code execution, disabling SELinux and gaining root access.
This repository contains a functional exploit for CVE-2022-38181, targeting a vulnerability in the Mali GPU driver on Android devices. The exploit leverages memory corruption to achieve local privilege escalation (LPE) by manipulating GPU memory allocations and executing shellcode to bypass SELinux restrictions.
This repository contains a functional exploit for CVE-2022-38181, targeting the ARM Mali kernel driver on Amazon FireTV 3rd gen Cube. The exploit leverages a use-after-free vulnerability to achieve arbitrary kernel code execution, disable SELinux, and gain root privileges.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H