Login Request a demo
Medium severity · published Aug 4, 2025
CVE-2025-0932
Mali GPU Userspace Driver allows access to already freed memory
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to already freed memory.This issue affects Bifrost GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r48p0 through r49p3, from r50p0 through r54p0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A5
Arm 5th Gen GPU Architecture Userspace Driver · Arm Ltd
r48p0 through r49p3; r50p0 through r54p0 · source: vendor
BG
Bifrost GPU Userspace Driver · Arm Ltd
r48p0 through r49p3; r50p0 through r51p0 · source: vendor, NVD
VG
Valhall GPU Userspace Driver · Arm Ltd
r48p0 through r49p3; r50p0 through r54p0 · source: vendor, NVD
5G
5th Gen Gpu Architecture Userspace Driver · Arm
r48p0 before r49p4; r50p0 before r54p1 · source: NVD
Affected product
A5
Arm 5th Gen GPU Architecture Userspace Driver
Arm Ltd
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0932
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0932
Vendor Advisory
https://developer.arm.com/documentation/110626/latest/
More from Arm 5th Gen GPU Architecture Userspace Driver
7.8
CVE-2026-9034
Mali GPU Userspace Driver allows access to already freed memory
7.8
CVE-2025-1246
Mali GPU Userspace Driver allows an Out-of-Bounds access
5.9
CVE-2025-0050
Mali GPU Userspace Driver allows an Out-of-Bounds access
5.1
CVE-2026-11891
Mali GPU Userspace Driver allows access to already freed memory