CVE-2025-0050
Description
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.
How to fix
- arm bifrost_gpu_userspace_driverr49p3 or later
- arm 5th_gen_gpu_architecture_userspace_driverr49p3, r54p0 or later
- arm valhall_gpu_userspace_driverr49p3, r54p0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arm bifrost_gpu_userspace_driver | r0p0 ≤ v < r49p3, r50p0 ≤ v ≤ r51p0 | r49p3 |
| arm 5th_gen_gpu_architecture_userspace_driver | r41p0 ≤ v < r49p3, r50p0 ≤ v < r54p0 | r49p3, r54p0 |
| arm valhall_gpu_userspace_driver | r19p0 ≤ v < r49p3, r50p0 ≤ v < r54p0 | r49p3, r54p0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.