CVE-2025-58410

High CVSS: 7.5

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.

This is caused by improper handling of the memory protections for the buffer resource.

Vendor

Imaginationtech

Product

Ddk

CWE

CWE-280

Yayın Tarihi

2025-11-17 17:15:48

Güncelleme

2026-01-12 15:14:01

Source Identifier

367425dc-4d06-4041-9650-c2dc6aaa27ce

KEV Date Added

Kategoriler

CWE-280 Ddk HIGH Imaginationtech 2025

Referanslar

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Benzer Kayıtlar

Medium

CVE-2026-21736

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to re…

Critical

CVE-2025-13952

A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a wr…

High

CVE-2025-10865

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of refe…

Low

CVE-2025-58409

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to…

High

CVE-2025-58411

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reso…

Critical

CVE-2025-25176

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in…