Use After Free Vulnerability in Arm GPU Userspace Drivers
CVE-2026-9034

Currently unrated

Key Information:

Vendor

Arm
Status
Bifrost Gpu Userspace Driver
Valhall Gpu Userspace Driver
Arm 5th Gen Gpu Architecture Userspace Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-9034?

The vulnerability in Arm Ltd's GPU Userspace Drivers allows a non-privileged user process to exploit freed memory through valid GPU processing operations, such as WebGL or WebGPU. This version-specific issue affects multiple drivers, potentially leading to unauthorized memory access and posing a security risk to systems utilizing these GPU architectures.

Affected Version(s)

Arm 5th Gen GPU Architecture Userspace Driver r42p0

Arm 5th Gen GPU Architecture Userspace Driver r50p0

Arm 5th Gen GPU Architecture Userspace Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Florian Schweitzer (aff. Certitude Consulting GmbH)
.