CVE-2022-28350

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
May 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-283524.8WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after ceCVE-2022-283536.1In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL (aka external.php?url=) is vulnerable to XSS.CVE-2022-283546.1In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period.CVE-2022-283557.5randomUUID in Scala.js before 1.10.0 generates predictable values.CVE-2022-283565.5In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.CVE-2022-283579.8NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management accouCVE-2022-283636.1Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username paramCVE-2022-283645.4Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file paraCVE-2022-283655.3Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authenticationCVE-2022-283667.5Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory CVE-2022-283676.1OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly eCVE-2022-283689.8Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (with
CVE-2022-28350: Critical severity, CVSS 9.8 | Vulnix