● Android Bulletin · June 2026

Android Security Bulletin: June 2026 Pixel Arm Mali GPU Triage

Technical triage of Google's June 2026 Pixel advisory resolving actively exploited zero-days in the Arm Mali GPU driver and kernel memory allocators.

44
Total Bulletins
1
Commercial Spyware Zero-Day
8.8
CVSS Mali Flaw
Priority
Mobile Security Action

Анализ рисков и вердикт безопасности

Google reported that CVE-2024-29745 in the Arm Mali GPU kernel driver was actively exploited in targeted surveillance campaigns. A race condition in page table mapping allowed untrusted applications to gain kernel execution.

Матрица приоритизации уязвимостей

Идентификатор CVE Подсистема / Компонент Последствия CVSS Активная эксплуатация?
CVE-2024-29745Arm Mali GPU (kbase)Race Condition / LPE8.8 HighYES (In-The-Wild)
CVE-2024-29746Pixel BootloaderInformation Disclosure7.1 HighNo
CVE-2024-29747Keystore KeymasterCryptographic Bypass6.7 MediumNo
РАЗБОР ИСХОДНОГО КОДА

Deep Dive: Arm Mali GPU Driver Memory Race Condition Teardown →

Analyze the C fix in drivers/gpu/arm/midgard/mali_kbase_mem.c locking page tracking structures during concurrent mmap teardown.

← Полный каталог уязвимостей Все бюллетени безопасности →