CVE-2025-58408 - CVE House

Back to Database

Status published Unknown CVE-2025-58408

GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code

0 CVSS

Vulnerability Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in which the reference counts can become unbalanced. This can lead to the premature destruction of a resource while in use.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58408

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

More from Imagination Technologies

View All →

GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation

GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite

GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF

GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory

Affected Vendor

Imagination Technologies

View all reports →

Affected Software

Graphics DDK

Vulnerable Versions:

1.15 RTM, 1.17 RTM, 1.18 RTM, 23.2 RTM, 25.3 RTM

Timeline

Official Publish: December 1st, 2025

Last Modified: December 1st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control

T1485 Data Destruction