CVE-2025-0050
April 7, 2025, 2:17 p.m.
None
No Score
Description
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.
Product(s) Impacted
| Vendor | Product | Versions |
|---|---|---|
| Arm |
|
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
*CPE(s)
Affected systems and software identified for this CVE.
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| a | arm | arm_bifrost_gpu_userspace_driver | r0p0-r49p2 | / | / | / | / | / | / | / |
| a | arm | arm_bifrost_gpu_userspace_driver | r50p0-r51p0 | / | / | / | / | / | / | / |
| a | arm | arm_valhall_gpu_userspace_driver | r19p0-r49p2 | / | / | / | / | / | / | / |
| a | arm | arm_valhall_gpu_userspace_driver | r50p0-r53p0 | / | / | / | / | / | / | / |
| a | arm | arm_5th_gen_gpu_architecture_userspace_driver | r41p0-r49p2 | / | / | / | / | / | / | / |
| a | arm | arm_5th_gen_gpu_architecture_userspace_driver | r50p0-r53p0 | / | / | / | / | / | / | / |
Tags
Timeline
Published: April 7, 2025, 12:15 p.m.
Last Modified: April 7, 2025, 2:17 p.m.
Last Modified: April 7, 2025, 2:17 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
arm-security@arm.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.