It's patched in Vanadium. Time would need to be invested into seeing if this specific CVE would have affected GrapheneOS in the past.