Use After Free Vulnerability in Arm GPU Userspace Drivers
CVE-2026-9034

7.8HIGH

Key Information:

Vendor

Arm
Status
Bifrost Gpu Userspace Driver
Valhall Gpu Userspace Driver
Arm 5th Gen Gpu Architecture Userspace Driver
Vendor
CVE Published:
8 September 2026

What is CVE-2026-9034?

The vulnerability in Arm Ltd's GPU Userspace Drivers allows a non-privileged user process to exploit freed memory through valid GPU processing operations, such as WebGL or WebGPU. This version-specific issue affects multiple drivers, potentially leading to unauthorized memory access and posing a security risk to systems utilizing these GPU architectures.

Affected Version(s)

Arm 5th Gen GPU Architecture Userspace Driver r42p0

Arm 5th Gen GPU Architecture Userspace Driver r50p0

Arm 5th Gen GPU Architecture Userspace Driver r55p0

References

https://support.arm.com/documentation/111552/1-0/?lang=en

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Florian Schweitzer (aff. Certitude Consulting GmbH)
.