The Google Project Zero team disclosed this week that Arm patched two security vulnerabilities, CVE-2022-33917 and CVE-2022-36449, in its Mali GPU core driver this summer, but until the details of the vulnerabilities and the demonstration code were made public, the mobile phone Manufacturers still haven’t patched the relevant vulnerabilities, exposing many Android phones with Mali GPUs, including Pixel, Samsung, Xiaomi, and Oppo.
