Medium severity · published Aug 4, 2025
CVE-2025-0932
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a…
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to already freed memory.This issue affects Bifrost GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
5G
5th Gen Gpu Architecture Userspace Driver · Arm
r48p0 before r49p4; r50p0 before r54p1 · source: NVD
BG
Bifrost Gpu Userspace Driver · Arm
r48p0 before r49p4; r50p0 before r54p1 · source: NVD
VG
Valhall Gpu Userspace Driver · Arm
r48p0 before r49p4; r50p0 before r54p1 · source: NVD
Affected product
5G
5th Gen Gpu Architecture Userspace Driver
Arm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0932
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0932
Vendor Advisory
https://developer.arm.com/documentation/110626/latest/
More from 5th Gen Gpu Architecture Userspace Driver
7.8
CVE-2025-1246
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm…
5.9
CVE-2025-0050
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm…