● Android Bulletin · June 2026

Android Security Bulletin: June 2026 Pixel Arm Mali GPU Triage

Technical triage of Google's June 2026 Pixel advisory resolving actively exploited zero-days in the Arm Mali GPU driver and kernel memory allocators.

44
Total Bulletins
1
Commercial Spyware Zero-Day
8.8
CVSS Mali Flaw
Priority
Mobile Security Action

漏洞风险分类与修复裁决

Google reported that CVE-2024-29745 in the Arm Mali GPU kernel driver was actively exploited in targeted surveillance campaigns. A race condition in page table mapping allowed untrusted applications to gain kernel execution.

重点漏洞分类评级矩阵

CVE 编号 核心子系统 / 组件 影响程度 CVSS 是否在野利用？
CVE-2024-29745Arm Mali GPU (kbase)Race Condition / LPE8.8 HighYES (In-The-Wild)
CVE-2024-29746Pixel BootloaderInformation Disclosure7.1 HighNo
CVE-2024-29747Keystore KeymasterCryptographic Bypass6.7 MediumNo
深度源码剖析

Deep Dive: Arm Mali GPU Driver Memory Race Condition Teardown →

Analyze the C fix in drivers/gpu/arm/midgard/mali_kbase_mem.c locking page tracking structures during concurrent mmap teardown.

← 浏览完整安全目录 所有平台安全更新 →