CVE-2025-0478 in Imagination Graphics DDK
要約 (英語)
Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform, altering their behaviour.
責任者
imaginationtech
予約する
2025年01月15日
公開
2025年03月24日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 300738 | Imagination Graphics DDK GPU Driver 特権昇格 | 280 | 未定義 | 公式な修正 | CVE-2025-0478 |