CVE-2025-0050: falha de média gravidade em Arm Ltd Bifrost GPU Userspace Driver
Mali GPU Userspace Driver allows an Out-of-Bounds access
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Arm 5th Gen GPU Architecture Userspace Driver+ Monitorar Valhall GPU Userspace Driver
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.2%
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Arm Ltd · Arm 5th Gen GPU Architecture Userspace DriverArm Ltd · Bifrost GPU Userspace DriverArm Ltd · Valhall GPU Userspace DriverCVEs relacionadas — Arm Ltd Bifrost GPU Userspace Driver
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0932MEDIUMMali GPU Userspace Driver allows access to already freed memoryEPSS 0.3%CVE-2023-32804—Mali GPU Userspace Driver can make an Out-of-Bounds accessEPSS 0.3%CVE-2025-1246HIGHMali GPU Userspace Driver allows an Out-of-Bounds accessEPSS 0.2%CVE-2026-9034HIGHMali GPU Userspace Driver allows access to already freed memoryEPSS 0.2%CVE-2026-11891MEDIUMMali GPU Userspace Driver allows access to already freed memoryEPSS 0.2%