{
  "crds_version": "0.1",
  "kind": "base",
  "id": "crds:cve-2022-38181",
  "revision": 1,
  "title": "Arm Mali GPU Kernel Driver — Use-After-Free",
  "summary": "The Arm Mali graphics processor kernel driver mishandles memory operations, so an unprivileged user can reach freed memory and may gain root privileges or disclose information. Bifrost, Valhall and Midgard drivers are affected, and public exploit code exists.",
  "source_type": "cve",
  "severity": "high",
  "cvss": {
    "score": 8.8,
    "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "version": "3.1"
  },
  "epss": 0.18461,
  "exploitation": {
    "known_exploited": true,
    "exploit_available": true,
    "attack_complexity": "low",
    "kev_added": "2023-03-30",
    "kev_due": "2023-04-20",
    "prerequisites": "Unprivileged code running on a device with an affected driver."
  },
  "kill_chain": "privilege_escalation",
  "recommended_action": "Update the Arm Mali driver following Arm's security updates, or install your device vendor's update.",
  "confidence": "high",
  "provenance": [
    {
      "fields": [
        "cvss",
        "exploitation.attack_complexity",
        "exploitation.exploit_available",
        "published_at",
        "references"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2022-38181",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "exploitation.known_exploited",
        "exploitation.kev_added",
        "exploitation.kev_due"
      ],
      "source": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "epss"
      ],
      "source": "https://api.first.org/data/v1/epss?cve=CVE-2022-38181",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "title",
        "subtitle",
        "summary",
        "severity",
        "remediation",
        "mitre_attack",
        "kill_chain",
        "recommended_action",
        "confidence",
        "tags",
        "exploitation.prerequisites"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2022-38181",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "claude-code"
    }
  ],
  "references": [
    {
      "type": "cve",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38181",
      "label": "NVD record"
    },
    {
      "type": "cisa",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "label": "CISA Known Exploited Vulnerabilities catalog"
    },
    {
      "type": "vendor_advisory",
      "url": "https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities"
    },
    {
      "type": "vendor_advisory",
      "url": "https://developer.arm.com/support/arm-security-updates"
    },
    {
      "type": "exploit",
      "url": "https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/"
    }
  ],
  "published_at": "2022-10-25T19:15:11.487Z",
  "issued_at": "2026-11-05T08:18:20.755Z",
  "tags": [
    "arm",
    "mali",
    "use-after-free"
  ]
}