CVE-2022-22706 Mali GPU PoC Achieves Root on Tcl Android TV

Thu, 29 Oct 2026 17:24:45 +0000

Engineer — Learn: CVE-2022-22706 (ARM Mali page-cache UAF) is CISA KEV-listed and a new public PoC demonstrates full root on Tcl Android TV; if you manage Android-based kiosks, lobby displays, or embedded Linux devices with Mali GPUs, audit whether they carry unpatched Android security patches from before March 2022.
SOC/IR — Skip
Leader — Skip
Signals: CVE-2022-22706 — CISA KEV: listed, EPSS 0.01, public PoC on GitHub

Mali-Gpu on CuraSec