Use After Free Vulnerability in Arm Ltd GPU Drivers
CVE-2025-0932

4.3MEDIUM

Key Information:

Vendor

Arm
Status
Bifrost Gpu Userspace Driver
Valhall Gpu Userspace Driver
Arm 5th Gen Gpu Architecture Userspace Driver
Vendor
CVE Published:
4 August 2025

What is CVE-2025-0932?

A Use After Free vulnerability exists in Arm Ltd's Bifrost, Valhall, and 5th Gen GPU Userspace Drivers, enabling non-privileged user processes to execute valid GPU processing tasks through technologies like WebGL or WebGPU. This flaw allows these processes to access memory that has already been freed, potentially leading to memory corruption and unauthorized data exposure. The issue affects multiple driver versions, creating a significant risk for applications relying on these graphics processing units.

Affected Version(s)

Arm 5th Gen GPU Architecture Userspace Driver r48p0

Arm 5th Gen GPU Architecture Userspace Driver r50p0

Bifrost GPU Userspace Driver r48p0

References

https://developer.arm.com/documentation/110626/latest/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lukas Bernhard
.