BaseFortify

Publication date: 2025-11-17

Last updated on: 2025-11-18

Assigner: imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-17

Last Modified

2025-11-18

Generated

2026-07-06

AI Q&A

2025-11-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-58410

EUVD

EUVD-2025-197806

Affected Vendors & Products

Vendor	Product	Version / Range
imagination_technologies	gpu_driver_development_kit	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-280	The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when software running as a non-privileged user improperly handles GPU system calls, allowing it to gain write permissions to memory buffers that are supposed to be read-only. The root cause is improper handling of memory protections for the buffer resource.

Impact Analysis

The vulnerability could allow an attacker or malicious software running with limited privileges to write to memory areas that should be read-only, potentially leading to unauthorized data modification, system instability, or escalation of privileges.

Hi! I’m here to help you understand CVE-2025-58410. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70