CVE-2025-0050

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Arm Ltd	Valhall GPU Userspace Driver	>= r19p0, <= r49p2; >= r50p0, <= r53p0
Arm Ltd	Arm 5th Gen GPU Architecture Userspace Driver	>= r41p0, <= r49p2; >= r50p0, <= r53p0
Arm Ltd	Bifrost GPU Userspace Driver	>= r0p0, <= r49p2; >= r50p0, <= r51p0

References

https://developer.arm.com/documentation/110435/latest/Vendor Advisory

Timeline

Published: Apr 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-00518.7Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service.CVE-2025-00528.3Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service.CVE-2025-00535.3SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a CVE-2025-00545.4SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The CVE-2025-00556.0SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrati CVE-2025-00566.0SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�CVE-2025-00574.8SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin ca CVE-2025-00586.5In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource CVE-2025-00596.0Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP store user input in the local browser storage to improve usa CVE-2025-00606.5SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can CVE-2025-00619.1SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without CVE-2025-00624.7SAP BusinessObjects Business Intelligence Platform allows an attacker to inject JavaScript code in Web Intelligence reports. This code is th