CVE-2025-58410
BaseFortify
Publication date: 2025-11-17
Last updated on: 2025-11-18
Assigner: imaginationtech
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| imagination_technologies | gpu_driver_development_kit | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-280 | The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs when software running as a non-privileged user improperly handles GPU system calls, allowing it to gain write permissions to memory buffers that are supposed to be read-only. The root cause is improper handling of memory protections for the buffer resource.
How can this vulnerability impact me? :
The vulnerability could allow an attacker or malicious software running with limited privileges to write to memory areas that should be read-only, potentially leading to unauthorized data modification, system instability, or escalation of privileges.