# cve.now: Arm

The newest entries naming Arm as an affected vendor (up to 200), of 66 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-12387](https://cve.now/CVE-2026-12387.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 5.1)
- [CVE-2026-12285](https://cve.now/CVE-2026-12285.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 4.0)
- [CVE-2026-11891](https://cve.now/CVE-2026-11891.md): Mali GPU Userspace Driver allows access to already freed memory (CVSS 5.1)
- [CVE-2026-9040](https://cve.now/CVE-2026-9040.md): Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information (CVSS 7.7)
- [CVE-2026-9034](https://cve.now/CVE-2026-9034.md): Mali GPU Userspace Driver allows access to already freed memory (CVSS 7.8)
- [CVE-2026-7477](https://cve.now/CVE-2026-7477.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8)
- [CVE-2026-7476](https://cve.now/CVE-2026-7476.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8)
- [CVE-2026-5729](https://cve.now/CVE-2026-5729.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8)
- [CVE-2026-0860](https://cve.now/CVE-2026-0860.md): Mali GPU Kernel Driver allows access to sensitive kernel information (CVSS 7.5)
- [CVE-2026-0001](https://cve.now/CVE-2026-0001.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 4.4)
- [CVE-2025-10263](https://cve.now/CVE-2025-10263.md): Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex- (CVSS 9.1)
- [CVE-2026-0995](https://cve.now/CVE-2026-0995.md): An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completi (CVSS 3.6)
- [CVE-2025-0647](https://cve.now/CVE-2025-0647.md): In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to th (CVSS 7.9)
- [CVE-2025-6349](https://cve.now/CVE-2025-6349.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 5.1)
- [CVE-2025-8045](https://cve.now/CVE-2025-8045.md): Mali GPU Kernel Driver allows improper GPU processing operations (CVSS 4.0)
- [CVE-2025-2879](https://cve.now/CVE-2025-2879.md): Mali GPU Kernel Driver allows improper GPU processing operations (CVSS 5.1)
- [CVE-2025-3212](https://cve.now/CVE-2025-3212.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 5.3)
- [CVE-2025-0932](https://cve.now/CVE-2025-0932.md): Mali GPU Userspace Driver allows access to already freed memory (CVSS 4.3)
- [CVE-2025-7427](https://cve.now/CVE-2025-7427.md): Uncontrolled Search Path Element in Arm Development Studio before 2025 (CVSS 5.9)
- [CVE-2025-1246](https://cve.now/CVE-2025-1246.md): Mali GPU Userspace Driver allows an Out-of-Bounds access (CVSS 7.8)
- [CVE-2025-0819](https://cve.now/CVE-2025-0819.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8)
- [CVE-2025-0073](https://cve.now/CVE-2025-0073.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2025-0427](https://cve.now/CVE-2025-0427.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8)
- [CVE-2025-0072](https://cve.now/CVE-2025-0072.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2025-0050](https://cve.now/CVE-2025-0050.md): Mali GPU Userspace Driver allows an Out-of-Bounds access (CVSS 5.9)
- [CVE-2025-0015](https://cve.now/CVE-2025-0015.md): Mali GPU Kernel Driver allows improper GPU processing operations (CVSS 7.8)
- [CVE-2024-6790](https://cve.now/CVE-2024-6790.md): Mali GPU Kernel Driver can cause the whole system to become unresponsive (CVSS 4.0)
- [CVE-2024-7881](https://cve.now/CVE-2024-7881.md): An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those (CVSS 5.1)
- [CVE-2024-10929](https://cve.now/CVE-2024-10929.md): Spectre-BSE (CVSS 5.1)
- [CVE-2024-11864](https://cve.now/CVE-2024-11864.md): SCP-Firmware Vulnerability (CVSS 7.5)
- [CVE-2024-11863](https://cve.now/CVE-2024-11863.md): SCP-Firmware Vulnerability (CVSS 5.3)
- [CVE-2024-5660](https://cve.now/CVE-2024-5660.md): Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A (CVSS 9.8)
- [CVE-2024-9413](https://cve.now/CVE-2024-9413.md): The transport\_message\_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing (CVSS 8.0)
- [CVE-2024-7883](https://cve.now/CVE-2024-7883.md): CMSE secure state may leak from stack to floating-point registers (CVSS 3.7)
- [CVE-2024-3655](https://cve.now/CVE-2024-3655.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2024-4607](https://cve.now/CVE-2024-4607.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2024-2937](https://cve.now/CVE-2024-2937.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2024-0153](https://cve.now/CVE-2024-0153.md): Mali GPU Firmware allows improper GPU processing operations (CVSS 7.8)
- [CVE-2024-4610](https://cve.now/CVE-2024-4610.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.4, KEV)
- [CVE-2023-6363](https://cve.now/CVE-2023-6363.md): Mali GPU Kernel Driver allows improper GPU processing operations (CVSS 5.1)
- [CVE-2024-1067](https://cve.now/CVE-2024-1067.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.4)
- [CVE-2024-1395](https://cve.now/CVE-2024-1395.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 6.7)
- [CVE-2024-0151](https://cve.now/CVE-2024-0151.md): Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled (CVSS 6.5)
- [CVE-2024-1065](https://cve.now/CVE-2024-1065.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 5.9)
- [CVE-2024-0671](https://cve.now/CVE-2024-0671.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 6.8)
- [CVE-2023-6241](https://cve.now/CVE-2023-6241.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2023-6143](https://cve.now/CVE-2023-6143.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 8.4)
- [CVE-2023-5249](https://cve.now/CVE-2023-5249.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.0)
- [CVE-2023-5643](https://cve.now/CVE-2023-5643.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2023-5091](https://cve.now/CVE-2023-5091.md): Mali GPU Kernel Driver allows improper GPU processing operations (CVSS 7.0)
- [CVE-2023-32804](https://cve.now/CVE-2023-32804.md): Mali GPU Userspace Driver can make an Out-of-Bounds access (no CVSS)
- [CVE-2023-5427](https://cve.now/CVE-2023-5427.md): Mali GPU Kernel Driver allows improper GPU processing operations (CVSS 7.8)
- [CVE-2023-4295](https://cve.now/CVE-2023-4295.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8)
- [CVE-2023-3889](https://cve.now/CVE-2023-3889.md): Mali GPU Kernel Driver exposes sensitive data from freed memory (CVSS 7.8)
- [CVE-2023-4272](https://cve.now/CVE-2023-4272.md): Mali GPU Kernel Driver exposes sensitive data from freed memory (CVSS 5.5)
- [CVE-2023-34970](https://cve.now/CVE-2023-34970.md): Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations (CVSS 4.7)
- [CVE-2023-33200](https://cve.now/CVE-2023-33200.md): Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations (CVSS 4.7)
- [CVE-2023-4211](https://cve.now/CVE-2023-4211.md): Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations (CVSS 5.5, KEV)
- [CVE-2023-4039](https://cve.now/CVE-2023-4039.md): GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 (CVSS 4.8)
- [CVE-2022-43703](https://cve.now/CVE-2022-43703.md): Incomplete verification of installation file signature (no CVSS)
- [CVE-2022-43702](https://cve.now/CVE-2022-43702.md): Incomplete verification of installation file signature (no CVSS)
- [CVE-2022-43701](https://cve.now/CVE-2022-43701.md): Insecure directory permissions on installer files (CVSS 7.8)
- [CVE-2021-27433](https://cve.now/CVE-2021-27433.md): ARM mbed-ualloc memory library Integer Overflow or Wraparound (CVSS 7.3)
- [CVE-2021-27431](https://cve.now/CVE-2021-27431.md): ARM CMSIS RTOS2 Integer Overflow or Wraparound (CVSS 7.3)
- [CVE-2021-27435](https://cve.now/CVE-2021-27435.md): ARM mbed Integer Overflow or Wraparound (CVSS 7.3)
- [CVE-2017-2784](https://cve.now/CVE-2017-2784.md): An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2 (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/arm
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.