CVE-2025-0050Mali GPU Userspace Driver allows an Out-of-Bounds access
Description
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| arm | 5th gen gpu architecture userspace driver | r41p0 – < r49p3 | |
| Arm Ltd | Arm 5th Gen GPU Architecture Userspace Driver | r41p0 – ≤ r49p2, r50p0 – ≤ r53p0 | |
| Arm Ltd | Bifrost GPU Userspace Driver | r0p0 – ≤ r49p2, r50p0 – ≤ r51p0 | |
| Arm Ltd | Valhall GPU Userspace Driver | r19p0 – ≤ r49p2, r50p0 – ≤ r53p0 |
References and patches
- https://developer.arm.com/documentation/110435/latest/ Vendor Advisory
CPE matches (NVD) (6)
cpe:2.3:a:arm:5th_gen_gpu_architecture_userspace_driver:*:*:*:*:*:*:*:*≥ r41p0 < r49p3cpe:2.3:a:arm:5th_gen_gpu_architecture_userspace_driver:*:*:*:*:*:*:*:*≥ r50p0 < r54p0cpe:2.3:a:arm:bifrost_gpu_userspace_driver:*:*:*:*:*:*:*:*≥ r0p0 < r49p3cpe:2.3:a:arm:bifrost_gpu_userspace_driver:*:*:*:*:*:*:*:*≥ r50p0 ≤ r51p0cpe:2.3:a:arm:valhall_gpu_userspace_driver:*:*:*:*:*:*:*:*≥ r19p0 < r49p3cpe:2.3:a:arm:valhall_gpu_userspace_driver:*:*:*:*:*:*:*:*≥ r50p0 < r54p0