CVE-2025-0468

GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)

En bref

Sévérité: HIGH 7.1
EPSS: EPSS 0.21 % · centile 12 (2026-10-27)
État: PUBLISHED
Publiée: 2025-04-04
Mise à jour: 2025-04-07
Attribuée par: imaginationtech
Statut NVD: Deferred

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	HIGH 7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	CISA-ADP
CVSS 3.1	HIGH 7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Faiblesses (CWE)

CWE-280

Références européennes

ENISA EUVD · EUVD-2025-9894
GCVE · GCVE-0-2025-0468

Avis du CERT-FR

CERTFR-2025-AVI-0472 — Multiples vulnérabilités dans Google Android · cert.ssi.gouv.fr

Produits affectés

Produit	Versions
Imagination Technologies · Graphics DDK	affected 1.15 RTM ≤ 24.3 RTM ; unaffected 25.1 RTM

Références

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD