Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-0050 EUVD-2025-10376GHSA-633m-895c-3f9g

Mali GPU Userspace Driver allows an Out-of-Bounds access

Published Apr 7, 2025 · Updated Apr 10, 2025 · Assigned by Arm

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.

Affected products

VendorProductAffectedFixed
Arm Valhall GPU Userspace Driver r19p0 – ≤ r49p2, r50p0 – ≤ r53p0 —
Arm Arm 5th Gen GPU Architecture Userspace Driver r41p0 – ≤ r49p2, r50p0 – ≤ r53p0 —
Arm Bifrost GPU Userspace Driver r0p0 – ≤ r49p2, r50p0 – ≤ r51p0 —

Advisories 1

References