Veille CVE

Mercredi 12 juin 2024

2 CVE

  1. CVE-2024-4610 – Non évaluée Exploitée

    Arm Mali GPU Kernel Driver

    Arm Mali GPU Kernel Driver Use-After-Free Vulnerability — Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

  2. CVE-2024-4577 – Non évaluée Exploitée Rançongiciel

    PHP Group PHP

    PHP-CGI OS Command Injection Vulnerability — PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.