← Global Threat Landscape
CVE-2021-29256
CWE-416
Critical
91.9
RPSRPS range: 0–105; KEV-listed vulnerabilities can receive an exploitation amplifier.
Description
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
Source: NVD
Signals
- CVSS
- 8.8
- High · v3.1
- EPSS
- 2.98%
- Probability of exploitation in the next 30 days (FIRST)
- CISA KEV
- In CISA KEV since Jul 2023
- Fix commit
- No known fix commit
- Sources: MoreFixes, FreshFixes
- Weakness
- CWE-416
- Published
- 24 May 2021
- Last modified 3 Nov 2025
How to read these signals: RPS · EPSS · CISA KEV · Data sources
Get this score from the API
curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
https://api.intelligence.devsecure.io/api/v1/rps/CVE-2021-29256Replace the placeholder with your key. Get a free API key or rank your own CVEs.
Data as of 7 Oct 2026, 05:16 UK time