The researchers from the Project Zero team at Google published a report about critical vulnerabilties in the ARM Mali GPU leading to memory corruption and a "non-privileged user can get a write access to read-only memory pages". They reported the vulnerabilities to ARM where they were promptly fixed in July and August 2022. However, up to now those fixes are not available in Android. Affected are Pixel, Samsung, Xiaomi, Oppo and other devices as Google forgot to add those fixes to their Android updates. This is not the first time that this has happened. Now that Google Zero finally made the problem public, for Pixel devices the fix should be available in the coming weeks.
