Arm Ltd Vulnerabilities and Affected Products
Vulnerabilities associated with Valhall GPU Userspace Driver.
Products
Clear product- Valhall GPU Kernel Driver30 vulnerabilities
- Arm 5th Gen GPU Architecture Kernel Driver21 vulnerabilities
- Bifrost GPU Kernel Driver19 vulnerabilities
- Arm 5th Gen GPU Architecture Kernel Driver6 vulnerabilities
- Midgard GPU Kernel Driver5 vulnerabilities
- Arm 5th Gen GPU Architecture Userspace Driver4 vulnerabilities
- Bifrost GPU Userspace Driver4 vulnerabilities
- Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 Development Studio, Fast Models (FM), GNU Toolchain (GT), Keil MDK (KMDK), Mbed Studio (MS)3 vulnerabilities
- Valhall GPU Userspace Driver3 vulnerabilities
- Arm 5th Gen GPU Architecture Firmware1 vulnerability
- Arm Compiler for Embedded1 vulnerability
- Arm Compiler for Embedded FuSa 6.16LTS1 vulnerability
- Arm Compiler for Embedded FuSa 6.211 vulnerability
- Arm Compiler for Functional Safety 6.61 vulnerability
- Arm GNU Toolchain1 vulnerability
- CLang1 vulnerability
- Midgard GPU Userspace Driver1 vulnerability
- Valhall GPU Firmware1 vulnerability
- Valhall GPU Userspace Driver1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-0932MEDIUM | Mali GPU Userspace Driver allows access to already freed memoryUse After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to already freed memory.This issue affects Bifrost GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0; Arm … CWE-416Aug 4, 2025 | CVSS4.3v3.1 | EPSS0.246% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-1246HIGH | Mali GPU Userspace Driver allows an Out-of-Bounds accessImproper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r18p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: fro… CWE-119Jun 2, 2025 | CVSS7.8v3.1 | EPSS0.135% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-32804HIGH | Mali GPU Userspace Driver can make an Out-of-Bounds accessOut-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: from r0p0 through r32p0; Bifrost GPU Userspace Driver: from r0p0 through r44p0; Valhall GPU Userspace Driver: from… CWE-787Dec 4, 2023 | CVSS7.8v3.1 | EPSS0.228% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |