Back to Database
Status published
Unknown
CVE-2025-58410
GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR
Vulnerability Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58410
Credits & Attribution
No credits recorded in the NVD database.
More from Imagination Technologies
View All →CVE-2025-8109
GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation
Unknown
0
CVE-2025-6573
GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
Unknown
0
CVE-2025-58411
GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF
Unknown
0
CVE-2025-58409
GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory
Unknown
0
CVE-2025-58408
GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code
Unknown
0
Affected Vendor
Imagination Technologies
View all reports →Affected Software
Graphics DDK
Vulnerable Versions:
1.15 RTM, 1.17 RTM, 1.18 RTM, 23.2 RTM, 23.3 RTM, 25.2 RTM
Timeline
Official Publish:
November 17th, 2025
Last Modified:
November 17th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.