● Android Bulletin · June 2026

Android Security Bulletin: June 2026 Pixel Arm Mali GPU Triage

Technical triage of Google's June 2026 Pixel advisory resolving actively exploited zero-days in the Arm Mali GPU driver and kernel memory allocators.

44
Total Bulletins
1
Commercial Spyware Zero-Day
8.8
CVSS Mali Flaw
Priority
Mobile Security Action

Triage Exécutif et Verdict de Risque

Google reported that CVE-2024-29745 in the Arm Mali GPU kernel driver was actively exploited in targeted surveillance campaigns. A race condition in page table mapping allowed untrusted applications to gain kernel execution.

Matrice de Triage des Vulnérabilités

Identifiant CVE Sous-système / Composant Impact CVSS Exploitation Active ?
CVE-2024-29745Arm Mali GPU (kbase)Race Condition / LPE8.8 HighYES (In-The-Wild)
CVE-2024-29746Pixel BootloaderInformation Disclosure7.1 HighNo
CVE-2024-29747Keystore KeymasterCryptographic Bypass6.7 MediumNo
ANALYSE DE CODE DÉTAILLÉE

Deep Dive: Arm Mali GPU Driver Memory Race Condition Teardown →

Analyze the C fix in drivers/gpu/arm/midgard/mali_kbase_mem.c locking page tracking structures during concurrent mmap teardown.

← Parcourir l'Annuaire de Sécurité Tous les Bulletins de Sécurité →