arm bifrost gpu kernel driver

Name: arm bifrost gpu kernel driver
Brand: arm

productUS

cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical17high6medium1low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-38181US	high8.8OT critical	18.5% (97th)	KEV	no fix	2022-10-25	2 versions
CVE-2021-28663US	high8.8OT critical	12.1% (96th)	KEV	r29p0	2021-05-10	r0p0 → r29p0
CVE-2021-28664US	high8.8OT critical	5.41% (93rd)	KEV	r29p0	2021-05-10	r0p0 → r29p0
CVE-2023-26083US	low3.3OT critical	1.22% (68th)	KEV	r43p0	2023-04-06	r0p0 → r43p0
CVE-2022-22706US	high7.8OT critical	1.06% (64th)	KEV	r36p0	2022-03-03	r0p0 → r36p0
CVE-2021-29256US	high8.8OT critical	2.99% (87th)	KEV	r30p0	2021-05-24	r16p0 → r30p0
CVE-2023-4211US	medium5.5OT critical	1.10% (65th)	KEV	r43p0	2023-10-01	r0p0 → r43p0
CVE-2024-4610US	high7.8OT critical	0.76% (55th)	KEV	r41p0	2024-06-07	r34p0 → r41p0
CVE-2022-46395US	high8.8	2.70% (86th)	Exploit	no fix	2023-03-06	r0p0 → r41p0
CVE-2023-6241US	high7.0	0.71% (54th)	Exploit	r26p0	2024-03-04	r11p0 → r26p0
CVE-2024-1065US	—	0.21% (11th)	Exploit	r49p0	2024-04-19	r45p0 → r49p0
CVE-2022-28348US	critical9.8	1.45% (73rd)	—	no fix	2022-05-19	r0p0 → r36p0
CVE-2022-28349US	critical9.8	1.27% (70th)	—	no fix	2022-05-19	r17p0 → r23p0
CVE-2022-36449US	medium6.5	1.20% (68th)	—	no fix	2022-09-01	2 versions
CVE-2022-46891US	high8.8	0.81% (57th)	—	no fix	2023-01-17	r1p0 → r40p0
CVE-2025-3212US	—	0.34% (27th)	—	r54p1	2025-09-08	2 versions
CVE-2023-4272US	medium5.5	0.34% (27th)	—	no fix	2023-11-07	r0p0 → r41p0
CVE-2023-5427US	high7.8	0.33% (27th)	—	r46p0	2023-12-01	r44p0 → r46p0
CVE-2021-44828US	high7.8	0.26% (18th)	—	no fix	2022-01-14	r0p0 → r34p0
CVE-2023-32804US	high7.8	0.25% (17th)	—	no fix	2023-12-04	r0p0 → r44p0
CVE-2023-33200US	medium4.7	0.23% (13th)	—	r44p1	2023-10-03	r17p0 → r44p1
CVE-2024-2937US	high7.8	0.22% (13th)	—	r50p0	2024-08-05	r41p0 → r50p0
CVE-2024-0671US	—	0.22% (12th)	—	r49p0	2024-04-19	r7p0 → r49p0
CVE-2023-6143US	—	0.18% (8th)	—	r19p0	2024-03-04	r1p0 → r19p0
CVE-2024-4607US	high7.8	0.18% (8th)	—	r50p0	2024-08-05	r41p0 → r50p0
CVE-2023-28147US	medium5.5	0.18% (8th)	—	r43p0	2023-06-02	r17p0 → r43p0
CVE-2023-5643US	high7.8	0.18% (7th)	—	r46p0	2024-02-05	r41p0 → r46p0
CVE-2025-0427US	high7.8	0.17% (7th)	—	no fix	2025-05-02	2 versions
CVE-2024-3655US	—	0.17% (6th)	—	r49p1	2024-09-03	r43p0 → r49p1
CVE-2024-1067US	—	0.16% (5th)	—	r48p0	2024-05-03	r41p0 → r48p0
CVE-2025-0819US	—	0.16% (5th)	—	r49p4	2025-06-02	3 versions
CVE-2023-5249US	high7.0	0.15% (4th)	—	no fix	2024-02-05	r35p0 → r40p0
CVE-2024-6790US	medium6.1	0.15% (4th)	—	r49p1	2025-02-03	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free25 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-1251Mirrored Regions with Different Values1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan