CVE-2025-1246 - CVE House
Back to Database
Status published Unknown CVE-2025-1246

Mali GPU Userspace Driver allows an Out-of-Bounds access

Vulnerability Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r18p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r28p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p3, from r50p0 through r54p0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1246

Credits & Attribution

No credits recorded in the NVD database.

References

More from Arm Ltd

View All →
CVE-2025-8045
Mali GPU Kernel Driver allows improper GPU processing operations
Unknown 0
CVE-2025-6349
Mali GPU Kernel Driver allows improper GPU memory processing operations
Unknown 0
CVE-2025-3212
Mali GPU Kernel Driver allows access to already freed memory
Unknown 0
CVE-2025-2879
Mali GPU Kernel Driver allows improper GPU processing operations
Unknown 0
CVE-2025-0932
Mali GPU Userspace Driver allows access to already freed memory
Unknown 0

Affected Vendor

Affected Software

Bifrost GPU Userspace Driver, Valhall GPU Userspace Driver, Arm 5th Gen GPU Architecture Userspace Driver
Vulnerable Versions:
r18p0, r50p0, r28p0, r41p0

Timeline

Official Publish: June 2nd, 2025
Last Modified: June 2nd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control