{"schemaVersion":3,"id":"CVE-2025-0050","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.","dates":{"published":"2025-04-07T12:02:02.367Z","modified":"2025-04-10T14:06:48.933Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00164,"percentile":0.05256,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00164},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00164,"percentile":0.05256}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00164,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00164,"percentile":0.05256}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"arm ltd","product":"arm 5th gen gpu architecture userspace driver","name":"Arm 5th Gen GPU Architecture Userspace Driver","label":"arm 5th gen gpu architecture userspace driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ r41p0, ≤ r49p2","noFixRecorded":false,"fixedIn":null},{"text":"≥ r50p0, ≤ r53p0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ r41p0, ≤ r49p2 | ≥ r50p0, ≤ r53p0","eol":null,"hubHref":"/vendor/arm_ltd/arm_5th_gen_gpu_architecture_userspace_driver"},{"vendor":"arm ltd","product":"bifrost gpu userspace driver","name":"Bifrost GPU Userspace Driver","label":"bifrost gpu userspace driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ r0p0, ≤ r49p2","noFixRecorded":false,"fixedIn":null},{"text":"≥ r50p0, ≤ r51p0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ r0p0, ≤ r49p2 | ≥ r50p0, ≤ r51p0","eol":null,"hubHref":"/vendor/arm_ltd/bifrost_gpu_userspace_driver"},{"vendor":"arm ltd","product":"valhall gpu userspace  driver","name":"Valhall GPU Userspace  Driver","label":"valhall gpu userspace  driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ r19p0, ≤ r49p2","noFixRecorded":false,"fixedIn":null},{"text":"≥ r50p0, ≤ r53p0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ r19p0, ≤ r49p2 | ≥ r50p0, ≤ r53p0","eol":null,"hubHref":"/vendor/arm_ltd/valhall_gpu_userspace__driver"},{"vendor":"arm","product":"5th_gen_gpu_architecture_userspace_driver","name":"5th gen gpu architecture userspace driver","label":"5th_gen_gpu_architecture_userspace_driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ r41p0, < r49p3","noFixRecorded":false,"fixedIn":null},{"text":"≥ r50p0, < r54p0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ r41p0, < r49p3 | ≥ r50p0, < r54p0","eol":null,"hubHref":"/vendor/arm/5th_gen_gpu_architecture_userspace_driver"},{"vendor":"arm","product":"bifrost_gpu_userspace_driver","name":"bifrost gpu userspace driver","label":"bifrost_gpu_userspace_driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ r0p0, < r49p3","noFixRecorded":false,"fixedIn":null},{"text":"≥ r50p0, ≤ r51p0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ r0p0, < r49p3 | ≥ r50p0, ≤ r51p0","eol":null,"hubHref":"/vendor/arm/bifrost_gpu_userspace_driver"},{"vendor":"arm","product":"valhall_gpu_userspace_driver","name":"valhall gpu userspace driver","label":"valhall_gpu_userspace_driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ r19p0, < r49p3","noFixRecorded":false,"fixedIn":null},{"text":"≥ r50p0, < r54p0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ r19p0, < r49p3 | ≥ r50p0, < r54p0","eol":null,"hubHref":"/vendor/arm/valhall_gpu_userspace_driver"}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://developer.arm.com/documentation/110435/latest/","label":"developer.arm.com/documentation/110435/latest/","hostname":"developer.arm.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-04-07T12:02:02.367Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-10T14:06:48.933Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T09:15:58.424Z","stale":false,"partial":false}}