CVE-2025-25180
BaseFortify
Publication date: 2025-07-14
Last updated on: 2025-07-15
Assigner: imaginationtech
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-823 | The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability allows software running as a non-privileged user to make improper GPU system calls that subvert the GPU hardware, enabling it to write to arbitrary physical memory pages. This means the GPU can be tricked into corrupting memory pages that are not allocated by the GPU driver, including those used by the kernel and other drivers, potentially altering their behavior.
How can this vulnerability impact me? :
The vulnerability can lead to corruption of critical memory pages used by the kernel and drivers, which may cause system instability, unexpected behavior, or security breaches. An attacker could exploit this to alter system behavior, potentially gaining unauthorized control or causing denial of service.