THE INTERNET IS THINKING

Earlier sources: Hardware

Hardware is the physical foundation of computing: chips, sensors, devices, networks, and the processes that manufacture them. Follow semiconductor research, compute architectures, and engineering developments alongside their software and energy connections.

SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.

Open in the map ↗
Share this page ↗

523 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.

Earlier sources

Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.

  1. CISA · Added to KEV · First archived

    CVE-2024-3272: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability ↗

    D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution. Required action: This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-04-11 (not the first disclosure date). Action due date: 2024-05-02.

  2. CISA · Added to KEV · First archived

    CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability ↗

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-10-03 (not the first disclosure date). Action due date: 2023-10-24.

  3. CISA · Added to KEV · First archived

    CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability ↗

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-07-07 (not the first disclosure date). Action due date: 2023-07-28.

  4. CISA · Added to KEV · First archived

    CVE-2023-26083: Arm Mali GPU Kernel Driver Information Disclosure Vulnerability ↗

    Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-04-07 (not the first disclosure date). Action due date: 2023-04-28.

  5. CISA · Added to KEV · First archived

    CVE-2022-38181: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability ↗

    Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-30 (not the first disclosure date). Action due date: 2023-04-20.

  6. CISA · Added to KEV · First archived

    CVE-2022-22706: Arm Mali GPU Kernel Driver Unspecified Vulnerability ↗

    Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-30 (not the first disclosure date). Action due date: 2023-04-20.

  7. CISA · Added to KEV · First archived

    CVE-2022-4135: Google Chromium GPU Heap Buffer Overflow Vulnerability ↗

    Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-11-28 (not the first disclosure date). Action due date: 2022-12-19.

  8. CISA · Added to KEV · First archived

    CVE-2021-25370: Samsung Mobile Devices Memory Corruption Vulnerability ↗

    Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-11-08 (not the first disclosure date). Action due date: 2022-11-29.

  9. CISA · Added to KEV · First archived

    CVE-2021-25369: Samsung Mobile Devices Improper Access Control Vulnerability ↗

    Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-11-08 (not the first disclosure date). Action due date: 2022-11-29.

  10. CISA · Added to KEV · First archived

    CVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability ↗

    Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2021-11-17.

Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.

How to assess evidence about Hardware

Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.

See the collection and counting methodology ↗ · Read the weekly synthesis ↗

Follow a thread

Explore related regions

These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.