CVE-2025-58407 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or wr…
High CVSS: 7.4

CVE-2025-58407

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
Vendor
Imaginationtech
Product
Ddk
CWE
CWE-367
Yayın Tarihi
2025-11-17 18:15:57
Güncelleme
2026-01-08 17:13:38
Source Identifier
367425dc-4d06-4041-9650-c2dc6aaa27ce
KEV Date Added
-

Kategoriler

CWE-367 Ddk HIGH Imaginationtech 2025

Referanslar

https://www.imaginationtech.com/gpu-driver-vulnerabilities/