arm midgard gpu kernel driver

Name: arm midgard gpu kernel driver
Brand: arm

productUS

cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical10high4medium1low

updated 2026-10-27

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-38181US	high8.8OT critical	18.5% (97th)	KEV	no fix	2022-10-25	r4p0 → r31p0
CVE-2021-28663US	high8.8OT critical	12.1% (96th)	KEV	r31p0	2021-05-10	r4p0 → r31p0
CVE-2021-28664US	high8.8OT critical	5.41% (93rd)	KEV	r31p0	2021-05-10	r8p0 → r31p0
CVE-2023-26083US	low3.3OT critical	1.22% (68th)	KEV	no fix	2023-04-06	r6p0 → r32p0
CVE-2022-22706US	high7.8OT critical	1.06% (64th)	KEV	r32p0	2022-03-03	r26p0 → r32p0
CVE-2021-29256US	high8.8OT critical	2.99% (87th)	KEV	r31p0	2021-05-24	r28p0 → r31p0
CVE-2023-4211US	medium5.5OT critical	1.10% (65th)	KEV	no fix	2023-10-01	r12p0 → r32p0
CVE-2022-46395US	high8.8	2.70% (86th)	Exploit	no fix	2023-03-06	r0p0 → r32p0
CVE-2023-6241US	high7.0	0.71% (54th)	Exploit	no fix	2024-03-04	r13p0 → r32p0
CVE-2022-28348US	critical9.8	1.45% (73rd)	—	no fix	2022-05-19	r4p0 → r31p0
CVE-2022-36449US	medium6.5	1.20% (68th)	—	no fix	2022-09-01	r4p0 → r32p0
CVE-2022-46891US	high8.8	0.81% (57th)	—	no fix	2023-01-17	r13p0 → r32p0
CVE-2023-4272US	medium5.5	0.34% (27th)	—	no fix	2023-11-07	r8p0 → r32p0
CVE-2021-44828US	high7.8	0.26% (18th)	—	no fix	2022-01-14	r26p0 → r30p0
CVE-2023-32804US	high7.8	0.25% (17th)	—	no fix	2023-12-04	r0p0 → r32p0
CVE-2024-0671US	—	0.22% (12th)	—	no fix	2024-04-19	r19p0 → r32p0
CVE-2023-6143US	—	0.18% (8th)	—	no fix	2024-03-04	r13p0 → r32p0
CVE-2023-28147US	medium5.5	0.18% (8th)	—	no fix	2023-06-02	r29p0 → r32p0

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free12 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-1251Mirrored Regions with Different Values1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.