CVE-2023-4211

CVE-2023-4211 affects the Arm Mali GPU Kernel Driver. The issue is a use-after-free/resource management error in the Mali driver that allows a local, non-privileged user to perform improper GPU memory processing and access freed memory. Impact is limited to confidentiality (high impact) with no d...

CVE-2023-26083

CVE-2023-26083 is a Mali GPU Kernel Driver information-disclosure vulnerability affecting Midgard, Bifrost, Valhall, and Avalon kernels (versions listed in source). An unprivileged user can cause kernel metadata exposure via a tlstream/Timeline facility, enabling a 16-byte attacker-controlled dat...

CVE-2023-6241

CVE-2023-6241 is a Use After Free vulnerability in ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall, and Arm 5th Gen GPU Architecture). It enables a local, non-privileged user to exploit a race condition in memory processing to achieve use-after-free, with impact on the affected driver revi...

CVE-2025-0072

The CVE-2025-0072 entries describe a Use After Free in ARM Valhall GPU Kernel Driver and ARM 5th Gen GPU Architecture Kernel Driver. The vulnerability arises from GPU memory paging and queue binding/unbind semantics in the kbase CSF path: a bound queue’s queue->phys pages can be overwritten by...

CVE-2025-0015

CVE-2025-0015 describes a Use-After-Free vulnerability in ARM Mali Valhall GPU Kernel Driver and ARM 5th Gen GPU Architecture Kernel Driver. A local, non-privileged user can perform improper GPU processing operations to gain access to memory that has already been freed. Affected versions include ...

CVE-2025-0427

CVE-2025-0427 is a Use-After-Free vulnerability in Arm Mali GPU kernel drivers (Bifrost, Valhall, and Arm 5th Gen) that allows a local, non-privileged user to access memory that has already been freed. Affected ranges: Bifrost r8p0–r51p0; Valhall r19p0–r49p3 and r50p0–r53p0; Arm 5th Gen r41p0–r49...

CVE-2025-0819

CVE-2025-0819 is a Use After Free vulnerability in ARM GPU kernel drivers. A local, non-privileged user can access already freed memory via GPU memory processing. Affected components and versions (from connected docs): Arm Bifrost GPU Kernel Driver r44p0–r51p0; Arm Valhall GPU Kernel Driver r44p0...

CVE-2024-1065

CVE-2024-1065 affects Arm Mali GPU Kernel Drivers (Bifrost, Valhall, and Arm 5th Gen GPU Architecture) with a Use After Free in GPU memory handling. Local, non-privileged users could access already freed memory. Affected versions: Bifrost/Valhall/Arm 5th Gen Kernel Drivers from r45p0 through r48p...

CVE-2025-0073

CVE-2025-0073 is a Use After Free vulnerability in ARM Valhall GPU Kernel Driver and ARM 5th Gen GPU Architecture Kernel Driver. The issue allows a local non-privileged user to perform improper GPU memory processing, gaining access to already freed memory. Affected versions are Valhall GPU Kernel...

CVE-2025-3212

CVE-2025-3212 is a Use After Free in Arm Mali GPU Kernel Drivers (Bifrost, Valhall, and Arm 5th Gen). Affected: Bifrost r41p0–r49p4 and r50p0–r51p0; Valhall r41p0–r49p4 and r50p0–r54p0; Arm 5th Gen r41p0–r49p4 and r50p0–r54p0. Impact: local, non-privileged process can access memory that has alrea...

CVE-2024-0671

CVE-2024-0671 is a Use-After-Free vulnerability in Arm Mali GPU Kernel Drivers (Midgard r19p0–r32p0; Bifrost r7p0–r48p0; Valhall r19p0–r48p0; Arm 5th Gen r41p0–r48p0). A local, non-privileged user can trigger improper GPU memory processing to access memory that has already been freed. Severity is...

CVE-2023-6363

CVE-2023-6363 : A use-after-free vulnerability in ARM Mali Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver allows a local, non-privileged user to manipulate memory after freeing it, potentially accessing already freed GPU memory. Affected components are the Valhall GPU Ke...

CVE-2023-6143

CVE-2023-6143 describes a Use-After-Free race condition in ARM Mali GPU Kernel Drivers (Midgard: r13p0–r32p0; Bifrost: r1p0–r18p0; Valhall: r37p0–r46p0; Arm 5th Gen: r41p0–r46p0). A local non-privileged user can trigger improper memory processing under heavy load with carefully prepared memory, l...

CVE-2024-6790

The CVE-2024-6790 issue is a Loop with Unreachable Exit Condition affecting Arm Mali GPU Kernel Drivers: Bifrost (r46p0–r49p0, r50p0–r51p0), Valhall (same ranges), and Arm 5th Gen GPU Architecture (same ranges). A non-privileged process can perform valid GPU memory operations (including via WebGL...

CVE-2023-5427

CVE-2023-5427 is a Use-After-Free vulnerability in ARM Mali GPU Kernel Drivers (Bifrost r44p0–r45p0; Valhall r44p0–r45p0; Arm 5th Gen r44p0–r45p0). A local, non-privileged user can trigger improper GPU processing operations to access memory that has already been freed. The issue is documented wit...

CVE-2024-1067

CVE-2024-1067 involves Arm Mali GPU Kernel Drivers (Bifrost, Valhall, Arm 5th Gen) with a Use-After-Free in certain Armv8.0/Linux combinations that could allow a local, non-privileged user to affect other processes’ userspace memory. Affected driver versions: r41p0–r47p0. Connected sources refere...

CVE-2023-5643

Summary (CVE-2023-5643) : An out-of-bounds write vulnerability exists in Arm Mali GPU kernel drivers (Bifrost, Valhall) and Arm 5th Gen GPU Architecture Kernel Driver. The issue allows a local, non-privileged user to trigger improper GPU memory processing, potentially writing outside buffer bound...

CVE-2024-1395

CVE-2024-1395 affects ARM Mali GPU Kernel Driver (Arm 5th Gen GPU Architecture) with affected revisions r41p0–r47p0. Description: Use-after-free in GPU memory processing allows a local non-privileged user to access already freed memory. Impact and exploitability: local escalation of privileges vi...

CVE-2024-3655

This CVE (CVE-2024-3655) is a Use After Free in ARM Mali GPU kernel drivers (Bifrost, Valhall, and Arm 5th Gen) that allows a local, non-privileged user to access memory that has already been freed. Affected drivers range from r43p0 through r49p0 for each architecture. The Android bulletin indica...

CVE-2023-32804

CVE-2023-32804 describes an out-of-bounds write in Arm Mali GPU Userspace Drivers (Midgard, Bifrost, Valhall, and Arm 5th Gen GPUs). A local non-privileged user can write a constant pattern to memory not allocated by the driver. Affected ranges are: Arm Midgard User-space Driver r0p0–r32p0; Bifro...

CVE-2024-4607

The CVE-2024-4607 entry concerns a Use After Free vulnerability in Arm Mali GPU kernel drivers: Bifrost, Valhall, and Arm 5th Gen GPU Architecture Kernel Drivers. Affects versions r41p0 through r49p0. Local, non-privileged users could misuse improper GPU memory handling to access freed memory. Pu...

CVE-2024-2937

CVE-2024-2937 affects Arm Mali GPU Kernel Drivers (Bifrost, Valhall) and Arm 5th Gen GPU Architecture Kernel Driver. DESCRIPTION: Use-After-Free in GPU memory handling allows a local, non-privileged user to access memory that has already been freed. Affected versions: Bifrost r41p0–r49p0; Valhall...

CVE-2025-2879

CVE-2025-2879 affects Arm Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver. A local, non-privileged user could perform improper GPU processing operations to expose sensitive data. Affected versions: Valhall: r29p0–r49p4 and r50p0–r54p0; Arm 5th Gen: r41p0–r49p4 and r50p0–r...

CVE-2025-6349

Use After Free vulnerability (CVE-2025-6349) in Arm Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver. A local, non-privileged user can perform improper GPU memory processing to access freed memory. Affected versions: Valhall GPU Kernel Driver r53p0–r54p1 and Arm 5th Gen GP...

CVE-2025-8045

CVE-2025-8045 is a local, use-after-free vulnerability affecting Arm Valhall GPU Kernel Driver and Arm 5th Gen GPU Architecture Kernel Driver. The issue allows a local non-privileged process to cause improper GPU processing and gain access to previously freed memory. Affected ranges: Valhall GPU ...