CVE-2025-1246

published 2025-06-02

CVE-2025-1246: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace…

Priority P3 42 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r18p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r28p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p3, from r50p0 through r54p0.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
arm	5th_gen_gpu_architecture_userspace_driver	>= r41p0 < r49p4	r49p4
arm	5th_gen_gpu_architecture_userspace_driver	>= r50p0 < r54p1	r54p1
arm	bifrost_gpu_userspace_driver	—	—
arm	bifrost_gpu_userspace_driver	—	—
arm	bifrost_gpu_userspace_driver	>= r48p0 < r49p4	r49p4
arm	valhall_gpu_userspace_driver	>= r28p0 < r49p4	r49p4
arm	valhall_gpu_userspace_driver	>= r50p0 < r54p1	r54p1
arm_ltd	arm_5th_gen_gpu_architecture_userspace_driver	r41p0 – r49p3	—
arm_ltd	arm_5th_gen_gpu_architecture_userspace_driver	r50p0 – r54p0	—
arm_ltd	bifrost_gpu_userspace_driver	r18p0 – r49p3	—
arm_ltd	bifrost_gpu_userspace_driver	r50p0 – r51p0	—
arm_ltd	valhall_gpu_userspace_driver	r28p0 – r49p3	—
arm_ltd	valhall_gpu_userspace_driver	r50p0 – r54p0	—
google	android	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119