VDB

CISA-2025-0050

CISA-2025-0050 PUBLISHED CVSS 5.9 MEDIUM

Reported by Arm · Published April 7, 2025

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.

Risk Scores

CVSS 3.1
5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

VendorProductVersions
Arm LtdValhall GPU Userspace Driverr19p0, r50p0
Arm LtdArm 5th Gen GPU Architecture Userspace Driverr41p0, r50p0
Arm LtdBifrost GPU Userspace Driverr0p0, r50p0
Arm LtdArm 5th Gen GPU Architecture Userspace Driverr41p0, *, r41p0
Arm LtdValhall GPU Userspace Driverr19p0, r50p0, r19p0
Arm LtdBifrost GPU Userspace Driverr0p0, r50p0, r0p0

Timeline

  • Apr 7, 2025 CVE Published
  • Apr 10, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›