CVE-2025-0468 - CVE House
Back to Database
Status published Unknown CVE-2025-0468

GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)

Vulnerability Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0468

Credits & Attribution

No credits recorded in the NVD database.

References

More from Imagination Technologies

View All →
CVE-2025-8109
GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation
Unknown 0
CVE-2025-6573
GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
Unknown 0
CVE-2025-58411
GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF
Unknown 0
CVE-2025-58410
GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR
Unknown 0
CVE-2025-58409
GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory
Unknown 0

Affected Vendor

Imagination Technologies

View all reports →

Affected Software

Graphics DDK
Vulnerable Versions:
1.15 RTM, 25.1 RTM

Timeline

Official Publish: April 4th, 2025
Last Modified: April 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-280

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.