● Android Bulletin · June 2026

Android Security Bulletin: June 2026 Pixel Arm Mali GPU Triage

Technical triage of Google's June 2026 Pixel advisory resolving actively exploited zero-days in the Arm Mali GPU driver and kernel memory allocators.

44
Total Bulletins
1
Commercial Spyware Zero-Day
8.8
CVSS Mali Flaw
Priority
Mobile Security Action

보안 릴리스 분석 및 위험성 평가

Google reported that CVE-2024-29745 in the Arm Mali GPU kernel driver was actively exploited in targeted surveillance campaigns. A race condition in page table mapping allowed untrusted applications to gain kernel execution.

핵심 취약점 트리아지 매트릭스

CVE 식별자 서브시스템 / 구성 요소 영향 CVSS 실제 악용 여부?
CVE-2024-29745Arm Mali GPU (kbase)Race Condition / LPE8.8 HighYES (In-The-Wild)
CVE-2024-29746Pixel BootloaderInformation Disclosure7.1 HighNo
CVE-2024-29747Keystore KeymasterCryptographic Bypass6.7 MediumNo
주목할 코드 분석

Deep Dive: Arm Mali GPU Driver Memory Race Condition Teardown →

Analyze the C fix in drivers/gpu/arm/midgard/mali_kbase_mem.c locking page tracking structures during concurrent mmap teardown.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →