CVE-2025-1246: falha de alta gravidade em Arm Ltd Bifrost GPU Userspace Driver
Mali GPU Userspace Driver allows an Out-of-Bounds access
Publicada em
Seguir esta CVE+ Monitorar Arm 5th Gen GPU Architecture Userspace Driver+ Monitorar Valhall GPU Userspace Driver
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r18p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r28p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p3, from r50p0 through r54p0.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Arm Ltd · Arm 5th Gen GPU Architecture Userspace DriverArm Ltd · Bifrost GPU Userspace DriverArm Ltd · Valhall GPU Userspace DriverCVEs relacionadas — Arm Ltd Bifrost GPU Userspace Driver
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0932MEDIUMMali GPU Userspace Driver allows access to already freed memoryEPSS 0.3%CVE-2023-32804—Mali GPU Userspace Driver can make an Out-of-Bounds accessEPSS 0.3%CVE-2025-0050MEDIUMMali GPU Userspace Driver allows an Out-of-Bounds accessEPSS 0.2%CVE-2026-9034HIGHMali GPU Userspace Driver allows access to already freed memoryEPSS 0.2%CVE-2026-11891MEDIUMMali GPU Userspace Driver allows access to already freed memoryEPSS 0.2%