High · 7.8 CVE-2025-25179 EUVD-2025-16613GHSA-9q3q-h6mj-695h

GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory

Published Jun 2, 2025 · Updated Jun 2, 2025 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.

Affected products

Vendor	Product	Affected	Fixed
Imagination Technologies	Graphics DDK	1.15 RTM, 1.17 RTM, 1.18 RTM, 23.2 RTM – ≤ 24.3 RTM	25.1 RTM

Advisories 2

WID-SEC-2025-1944 Android Patchday September 2025: Multiple Vulnerabilities BSI CERT-Bund (WID) · Sep 24, 2025
NCSC-2025-0273 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Sep 4, 2025

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

EUVD	v3.1	7.8
CISA-ADP	v3.1	7.8