Use After Free Vulnerability in Arm Ltd Valhall GPU Userspace Driver
CVE-2026-11891

5.1MEDIUM

Key Information:

Vendor

Arm
Status
Valhall Gpu Userspace Driver
Arm 5th Gen Gpu Architecture Userspace Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-11891?

A use after free vulnerability exists in the Arm Ltd Valhall GPU Userspace Driver that allows a non-privileged user process to access previously freed memory. This can occur during GPU processing operations conducted via platforms such as WebGL or WebGPU, potentially leading to unauthorized access and manipulation in the application's memory space. Affected versions include multiple releases from r46p0 to r55p0, highlighting the importance for users to update promptly to mitigate risks associated with this flaw.

Affected Version(s)

Arm 5th Gen GPU Architecture Userspace Driver r46p0

Arm 5th Gen GPU Architecture Userspace Driver r50p0

Arm 5th Gen GPU Architecture Userspace Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anymous
.