Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-0050


Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.


Published

2025-04-07T12:15:15.360

Last Modified

2025-12-18T15:27:59.367

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application arm 5th_gen_gpu_architecture_userspace_driver < r49p3 Yes
Application arm 5th_gen_gpu_architecture_userspace_driver < r54p0 Yes
Application arm bifrost_gpu_userspace_driver < r49p3 Yes
Application arm bifrost_gpu_userspace_driver ≤ r51p0 Yes
Application arm valhall_gpu_userspace_driver < r49p3 Yes
Application arm valhall_gpu_userspace_driver < r54p0 Yes

References