vciy

CVEs we hold for Arm

Records whose assigning authority named Arm as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9160CSTI in Arma Digital's Website TemplateArma Digital Media Inc. Website Template
CVE-2026-9040Mali GPU Kernel Driver allows denial of service or disclosure of sensitive informationArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-9034Mali GPU Userspace Driver allows access to already freed memoryArm 5th Gen GPU Architecture Userspace Driver
CVE-2026-8377Improper Authorization in Armiya Technologies' Access Control SystemArmiya Information Technologies Ltd. Co. Access Control…
CVE-2026-8323Open Redirect in Armiya Information Technologies' Access Control SystemArmiya Information Technologies Ltd. Co. Access Control…
CVE-2026-8309Reflected XSS in Armiya Technologies' Access Control SystemArmiya Information Technologies Ltd. Co. Access Control…
CVE-2026-8306Stored XSS in Armiya Technologies' Access Control SystemArmiya Information Technologies Ltd. Co. Access Control…
CVE-2026-82803armink struct2json JSON Deserialization s2jdef.h S2J_STRUCT_GET_string_ELEMENT null pointer dereferencearmink struct2json
CVE-2026-7477Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-7476Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-7380HTML Injection in Armiya Technologies' Access Control SystemArmiya Information Technologies Ltd. Co. Access Control…
CVE-2026-7188SQLi in Armiya Information Technologies' Access Control SystemArmiya Information Technologies Ltd. Co. Access Control…
CVE-2026-5729Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-5076ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege EscalationARMember Premium – Membership Plugin, Content Restriction…
CVE-2026-5074ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' ParameterARMember Premium – Membership Plugin, Content Restriction…
CVE-2026-5073ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' ParameterARMember Premium – Membership Plugin, Content Restriction…
CVE-2026-22041loggingredactor converts non-string types to string types in logsarmurox loggingredactor
CVE-2026-12387Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-12285Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-11891Mali GPU Userspace Driver allows access to already freed memoryArm 5th Gen GPU Architecture Userspace Driver
CVE-2026-0995no title heldArm C1 Pro
CVE-2026-0860Mali GPU Kernel Driver allows access to sensitive kernel informationArm 5th Gen GPU Architecture Kernel Driver
CVE-2026-0001Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-8045Mali GPU Kernel Driver allows improper GPU processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-7427Uncontrolled Search Path Element in Arm Development Studio before 2025Arm Development Studio
CVE-2025-6689FL3R Accessibility Suite <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via fl3raccessibilitysuite…armandofiore FL3R Accessibility Suite
CVE-2025-6349Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-3212Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-2879Mali GPU Kernel Driver allows improper GPU processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-1246Mali GPU Userspace Driver allows an Out-of-Bounds accessArm 5th Gen GPU Architecture Userspace Driver
CVE-2025-10263no title heldArm Cortex-A76AE
CVE-2025-0932Mali GPU Userspace Driver allows access to already freed memoryArm 5th Gen GPU Architecture Userspace Driver
CVE-2025-0819Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-0647no title heldArm C1-Ultra
CVE-2025-0427Mali GPU Kernel Driver allows access to already freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-0073Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-0072Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2025-0050Mali GPU Userspace Driver allows an Out-of-Bounds accessArm Ltd Bifrost GPU Userspace Driver
CVE-2025-0015Mali GPU Kernel Driver allows improper GPU processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-9413no title heldArm SCP-Firmware
CVE-2024-7883CMSE secure state may leak from stack to floating-point registersArm Ltd CLang
CVE-2024-7881no title heldArm C1-Premium
CVE-2024-6790Mali GPU Kernel Driver can cause the whole system to become unresponsiveArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-5660no title heldArm Cortex-X925
CVE-2024-5596ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functionsARMember Premium – Membership Plugin, Content Restriction…
CVE-2024-4610Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Ltd Valhall GPU Kernel Driver
CVE-2024-4607Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-4303ArmorX Android APP - MFA BypassArmorX APP
CVE-2024-3655Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-2937Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-1395Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-13149SQLi in Arma Store's ArmalifeArma Store Armalife
CVE-2024-1194Armcode AlienIP Locate Host denial of serviceArmcode AlienIP
CVE-2024-11864SCP-Firmware VulnerabilityArm SCP-Firmware
CVE-2024-11863SCP-Firmware VulnerabilityArm SCP-Firmware
CVE-2024-10929Spectre-BSEArm Cortex-A57
CVE-2024-1067Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-1065Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-0671Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2024-0153Mali GPU Firmware allows improper GPU processing operationsArm 5th Gen GPU Architecture Firmware
CVE-2024-0151no title heldArm v8-M Security Extensions Requirements on Development…
CVE-2023-6363Mali GPU Kernel Driver allows improper GPU processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-6241Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-6143Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-5643Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-5427Mali GPU Kernel Driver allows improper GPU processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-5249Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Ltd Valhall GPU Kernel Driver
CVE-2023-5091Mali GPU Kernel Driver allows improper GPU processing operationsArm Ltd Valhall GPU Kernel Driver
CVE-2023-48384ArmorX Global Technology Corporation ArmorX Spam - SQL InjectoinArmorX Spam
CVE-2023-4295Mali GPU Kernel Driver allows improper GPU memory processing operationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-4272Mali GPU Kernel Driver exposes sensitive data from freed memoryArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-4211Mali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-4039GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64Arm GNU Toolchain; GNU GCC
CVE-2023-3889Mali GPU Kernel Driver exposes sensitive data from freed memoryArm Ltd Valhall GPU Kernel Driver
CVE-2023-34970Mali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-33200Mali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsArm 5th Gen GPU Architecture Kernel Driver
CVE-2023-32804Mali GPU Userspace Driver can make an Out-of-Bounds accessArm 5th Gen GPU Architecture Userspace Driver
CVE-2023-2065IDOR in Armoli Technology's Cargo Tracking SystemArmoli Technology Cargo Tracking System
CVE-2022-43703Incomplete verification of installation file signatureArm Mobile Studio (AMS), DS-5 Development Studio, Fast…
CVE-2022-43702Incomplete verification of installation file signatureArm Mobile Studio (AMS), DS-5 Development Studio, Fast…
CVE-2022-43701Insecure directory permissions on installer filesArm Mobile Studio (AMS), DS-5 Development Studio, Fast…
CVE-2022-1903ARMember < 3.4.8 - Unauthenticated Admin Account TakeoverUnknown ARMember – Membership Plugin, Content Restriction…
CVE-2021-27435ARM mbed Integer Overflow or WraparoundARM mbed
CVE-2021-27433ARM mbed-ualloc memory library Integer Overflow or WraparoundARM mbed-ualloc memory library
CVE-2021-27431ARM CMSIS RTOS2 Integer Overflow or WraparoundARM CMSIS RTOS2
CVE-2020-3922ArmorX LisoMail - SQL InjectionArmorX LisoMail
CVE-2019-25480ARMBot Unrestricted File Upload via upload.phpARMBot
CVE-2018-25432Arm Whois 3.11 Buffer Overflow via ASLR BypassArmcode Arm Whois
CVE-2018-25427Arm Whois 3.11 Buffer Overflow via SEH OverwriteArmcode Arm Whois
CVE-2018-25423Arm Whois 3.11 Denial of Service via Buffer OverflowArmcode Arm Whois
CVE-2018-0498no title heldn/a ARM mbed TLS before 2.12.0, before 2.7.5, and before…
CVE-2018-0497no title heldn/a ARM mbed TLS before 2.12.0, before 2.7.5, and before…
CVE-2018-0488no title heldn/a ARM mbed TLS before 1.3.22, before 2.1.10, and before…
CVE-2018-0487no title heldn/a ARM mbed TLS before 1.3.22, before 2.1.10, and before…
CVE-2017-2784no title heldARM mbed TLS

95 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.