High 8.8 KEV-listed

CVE-2022-38181

CVE-2022-38181 Root Exploit Released for Amazon Fire TV Cube 3rd Gen

Vendor / product: Amazon Fire TV Cube 3rd Gen, ARM Mali GPU

Public PoC: Yes

First tracked by RiskWire: 2026-10-13

CISA KEV catalog

Added to KEV

2023-03-30 ↗

Federal remediation due

2023-04-20 (1272 days overdue)

Ransomware campaign use

Unknown

CISA description

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

Required action

Apply updates per vendor instructions.

Sources & citations (2)

Amazon Fire TV Cube hacked using 4-year-old vulnerability itnerd.blog · 2026-10-12
Fire TV Cube hack exposes root access via old GPU flaw cybernews.com · 2026-10-12

References

View on NVD ↗ View on MITRE CVE ↗ Search CISA ↗ KEV lookup tool

See CVE-2022-38181 in context

RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.

Book a 20-min demo →