Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.

CVE-2025-58407 is a vulnerability classified under CWE-367 (Time-of-check Time-of-use race condition) found in the Imagination Technologies Graphics DDK, specifically version 25.2 RTM1. The issue arises when kernel or driver software running inside a guest virtual machine issues commands to the GPU firmware. Due to a race condition between the time a memory address is checked and the time it is used, an attacker can exploit this timing window to cause the GPU firmware to read from or write to memory locations outside the allocated bounds. This results in a potential escape from the virtual machine sandbox, allowing unauthorized access to data or code in the host or other guest VMs. The vulnerability targets the GPU firmware interface, which is critical in virtualized environments where GPU resources are shared. Exploitation requires the attacker to have kernel or driver-level privileges within the guest VM, which is a high privilege level but still feasible in some threat scenarios. No public exploits or patches are currently available, indicating the vulnerability is newly disclosed. The absence of a CVSS score necessitates an independent severity assessment. The flaw threatens confidentiality and integrity by enabling unauthorized memory access and potential code execution outside the VM boundary. The vulnerability is particularly relevant for cloud providers, data centers, and enterprises using virtualization with Imagination Technologies' GPU drivers. The technical complexity of the attack is moderate, requiring precise timing and privileged access, but the impact could be severe if exploited.

Detailed information about CVE-2025-58407: CWE - CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition (4.18) in Imagination Technologies Graphics DDK affe

CVE-2025-58407: CWE - CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition (4.18) in Imagination Technologies Graphics DDK - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-58407: CWE - CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition (4.18) in Imagination Technologies Graphics DDK

Threats Tagged 'cve-2025-58407'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-58407'

Lead Pen Test Professional