high7.5
CVE-2025-58410
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.
Impact
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imaginationtech | Ddk | Versions 23.3, 24.1, 24.2, 24.3, 25.1, 25.2 |