CVE-2025-0932

published 2025-08-04

CVE-2025-0932: Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace…

Priority P4 23 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to already freed memory.This issue affects Bifrost GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
arm	5th_gen_gpu_architecture_userspace_driver	>= r48p0 < r49p4	r49p4
arm	5th_gen_gpu_architecture_userspace_driver	>= r50p0 < r54p1	r54p1
arm	bifrost_gpu_userspace_driver	>= r48p0 < r49p4	r49p4
arm	bifrost_gpu_userspace_driver	>= r50p0 < r54p1	r54p1
arm	valhall_gpu_userspace_driver	>= r48p0 < r49p4	r49p4
arm	valhall_gpu_userspace_driver	>= r50p0 < r54p1	r54p1
arm_ltd	arm_5th_gen_gpu_architecture_userspace_driver	r48p0 – r49p3	—
arm_ltd	arm_5th_gen_gpu_architecture_userspace_driver	r50p0 – r54p0	—
arm_ltd	bifrost_gpu_userspace_driver	r48p0 – r49p3	—
arm_ltd	bifrost_gpu_userspace_driver	r50p0 – r51p0	—
arm_ltd	valhall_gpu_userspace_driver	r48p0 – r49p3	—
arm_ltd	valhall_gpu_userspace_driver	r50p0 – r54p0	—
google	android	—	—
google	chrome_chrome	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-416