CVE-2025-25178

CVE-2025-25178: GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory

Vendor Imagination Technologies

Product Graphics DDK

Weakness CWE-1284

Published April 4, 2025

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption.

Key dates

02Disclosure timeline

April 4, 2025 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-25178 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1284.html

Related vulnerabilities

04Related CVE

CVE-2025-14869 Improper Validation of Specified Quantity in Input in GitLab CVE-2025-46656 CVE-2021-47818 DupTerminator 1.4.5639.37199 - Denial of Service CVE-2025-36009 IBM Db2 Denial of Service CVE-2024-24715 WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability