Arm vulnerabilities9 known to be exploited.
Arm has 155 published vulnerabilities across 130 products in our catalogue. 9 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Mbed TLS, with 58. If you run Arm software, patch the exploited flaws first.
The most recent Arm flaw added to the known-exploited list is CVE-2024-4610, on 12 June 2024. We keep watching the known-exploited list.
Which Arm products have the most vulnerabilities?
Mbed TLS leads with 58 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Arm vulnerabilities are being exploited?
9 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
- 5.5Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
- 8.8Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.
- 3.3Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
- 8.8Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.
- 7.8Arm Mali GPU Kernel Driver Unspecified Vulnerability
Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.
- 8.8Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and...
- 8.8Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose...
Which Arm flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 94%CVE-2017-5753Medium
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
- 84%CVE-2017-5754Medium
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the...
- 74%CVE-2017-5715Medium
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
- 61%CVE-2018-3639Medium
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an...
- 14%
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled.
- 12%
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free.
- 8.6%CVE-2018-3693Medium
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and...
- 7.5%CVE-2018-3640Medium
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a...
- 5.4%
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages.
- 4.8%CVE-2018-0488Critical
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a...
All Arm products we track.
51 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Mbed TLSmbed_tls58 vulnerabilities142 versions
- Valhall GPU Kernel Drivervalhall_gpu_kernel_driver44 vulnerabilities38 versions
- Bifrost GPU Kernel Driverbifrost_gpu_kernel_driver30 vulnerabilities38 versions
- Midgard GPU Kernel Drivermidgard_gpu_kernel_driver18 vulnerabilities16 versions
- 5th Gen GPU Architecture Kernel Driver5th_gen_gpu_architecture_kernel_driver17 vulnerabilities21 versions
- Mbed OSmbed_os7 vulnerabilities3 versions
- Avalon GPU Kernel Driveravalon_gpu_kernel_driver6 vulnerabilities3 versions
- Cortex-acortex-a6 vulnerabilities10 versions
- Cortex-A77 Firmwarecortex-a77_firmware5 vulnerabilities2 versions
- Mali GPU Kernel Drivermali_gpu_kernel_driver4 vulnerabilities5 versions
- Mbed Cryptombed_crypto4 vulnerabilities9 versions
- Trusted Firmware-Mtrusted_firmware-m4 vulnerabilities15 versions
- Arm Compilerarm_compiler3 vulnerabilities18 versions
- Arm7arm73 vulnerabilities1 version
- Ds Development Studiods_development_studio3 vulnerabilities3 versions
- Adaptive Scalable Texture Compression Encoderadaptive_scalable_texture_compression_encoder2 vulnerabilities18 versions
- Arm Compiler for Embedded Fusaarm_compiler_for_embedded_fusa2 vulnerabilities1 version
- Arm Compiler for Functional Safetyarm_compiler_for_functional_safety2 vulnerabilities2 versions
- Arm Trusted Firmwarearm_trusted_firmware2 vulnerabilities2 versions
- Arm-Trusted-Firmwarearm-trusted-firmware2 vulnerabilities17 versions
- Trusted Firmware-atrusted_firmware-a2 vulnerabilities58 versions
- 5th Gen GPU Architecture Firmware5th_gen_gpu_architecture_firmware1 vulnerability3 versions
- Aarch64cryptolibaarch64cryptolib1 vulnerability1 version
- Avalon Android Gralloc Moduleavalon_android_gralloc_module1 vulnerability1 version
This directory lists the 51 Arm products with at least one tracked version, of 130 in our catalogue.
Running Arm? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
- Matched to
- Valhall GPU Kernel Driver on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 155 published vulnerabilities across 130 products and 674 versions from Arm. The most recent Arm flaw added to the known-exploited list is CVE-2024-4610, on 12 June 2024.
9 Arm vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2024-4610, CVE-2023-4211 and CVE-2021-29256. The full list is on this page.
Mbed TLS, with 58 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Arm products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.