CVE-2025-0050 - CVE House
Back to Database
Status published Unknown CVE-2025-0050

Mali GPU Userspace Driver allows an Out-of-Bounds access

Vulnerability Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0050

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Valhall GPU Userspace Driver, Arm 5th Gen GPU Architecture Userspace Driver, Bifrost GPU Userspace Driver
Vulnerable Versions:
r19p0, r50p0, r41p0, r0p0

Timeline

Official Publish: April 7th, 2025
Last Modified: April 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)