CVE-2025-25178 GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory

🗓️ 04 Apr 2025 15:42:57Reported by imaginationtechType

Non-privileged user can corrupt kernel memory via improper GPU system calls due to CVE-2025-25178.

Reporter	Title	Published	Views	Family All 10
Android Security Bulletins	Android Security Bulletin—June 2025Stay organized with collectionsSave and categorize content based on your preferences.	2 Jun 202500:00	–	androidsecurity
CNNVD	Imagination GPU Driver 安全漏洞	4 Apr 202500:00	–	cnnvd
CVE	CVE-2025-25178	4 Apr 202515:42	–	cve
EUVD	EUVD-2025-9893	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	10 Jun 202507:19	–	ncsc
NVD	CVE-2025-25178	4 Apr 202516:15	–	nvd
OSV	ASB-A-395843768	1 Jun 202500:00	–	osv
Positive Technologies	PT-2025-14907 · Imagination Technologies · Graphics Ddk	4 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-25178	6 Apr 202517:34	–	redhatcve
Vulnrichment	CVE-2025-25178 GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory	4 Apr 202515:42	–	vulnrichment

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Linux",
      "Android"
    ],
    "product": "Graphics DDK",
    "vendor": "Imagination Technologies",
    "versions": [
      {
        "lessThanOrEqual": "24.3 RTM",
        "status": "affected",
        "version": "1.15 RTM",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "25.1 RTM",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
imaginationtech	www.imaginationtech.com/gpu-driver-vulnerabilities/

04 Apr 2025 15:42Current

EPSS0.00304

CWE-1284