CVE-2025-25179

CVE-2025-25179: GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory

Vendor Imagination Technologies

Product Graphics DDK

Weakness CWE-280

Published June 2, 2025

Last update June 2, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.

Key dates

02Disclosure timeline

June 2, 2025 CVE published

June 2, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-25179 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/280.html

Related vulnerabilities

Identifiers

CVE CVE-2025-25179

CWE CWE-280

Affected versions

Vendor Imagination Technologies

Product Graphics DDK

Affected 1.15 RTM

Vendor Imagination Technologies

Product Graphics DDK

Affected 1.17 RTM

Vendor Imagination Technologies

Product Graphics DDK

Affected 1.18 RTM

Vendor Imagination Technologies

Product Graphics DDK

Affected ≥ 23.2 RTM and ≤ 24.3 RTM

CVE-2025-25179: GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory

01Description

02Disclosure timeline

03References

04Related CVE