CVE-2025-58410

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.

PUBLISHED Reserved 2025-09-01 | Published 2025-11-17 | Updated 2025-11-17 | Assigner imaginationtech

Problem types

CWE - CWE-280: Improper Handling of Insufficient Permissions or Privileges (4.18)

Product status

References

www.imaginationtech.com/gpu-driver-vulnerabilities/

cve.org (CVE-2025-58410)

nvd.nist.gov (CVE-2025-58410)

Download JSON