Threat Intelligence Database

A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. The shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object.

CriticalVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2025-13952#cwe-416

CVE-2025-10865 is a high-severity use-after-free vulnerability in Imagination Technologies' Graphics DDK affecting versions 1.15 RTM, 1.17 RTM, 1.18 RTM, and 23.2 RTM. The flaw arises from improper reference counting of internal GPU resources when software running as a non-privileged user issues certain GPU system calls, leading to potential use-after-free conditions. Exploitation could allow an attacker to execute arbitrary code with limited privileges, impacting confidentiality, integrity, and availability of affected systems. No known exploits are currently in the wild. The vulnerability requires local access with low privileges but no user interaction. European organizations using affected Graphics DDK versions in embedded or graphics-intensive devices should prioritize patching once available.

HighVulnerabilityGermanyFranceNetherlands+3#cve#cve-2025-10865#cwe-416

CVE-2025-58409 is a vulnerability in Imagination Technologies Graphics DDK that allows non-privileged software to misuse GPU system calls to write to arbitrary physical memory. This improper restriction of operations within GPU memory buffers (CWE-119) can corrupt kernel and driver memory pages, potentially altering system behavior. The vulnerability affects multiple versions of the Graphics DDK and does not require user interaction or privileges to exploit. Although the CVSS score is low (3.5), the ability to write to arbitrary physical memory poses risks to system integrity. No known exploits are currently in the wild, and no patches have been released yet. European organizations using affected GPU drivers in embedded or specialized systems may be at risk. Mitigation involves restricting access to GPU interfaces, monitoring GPU driver updates, and applying vendor patches once available. Countries with significant embedded systems manufacturing and technology sectors, such as Germany, France, and the UK, are more likely to be impacted.

LowVulnerabilityGermanyFranceNetherlands+3#cve#cve-2025-58409#cwe-119

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.

HighVulnerabilityGermanyFranceUnited Kingdom+3#cve#cve-2025-58410#cwe-280