Vulnerabilidades de Imaginationtech
CVEs publicadas que afetam produtos de Imaginationtech: 27 registro(s), com severidade, exploração e correções.
CVE-2025-58407
Alta · 7.4
CWE-367 17/11/2025
GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
CVE-2025-58410
Alta · 7.5
CWE-280 17/11/2025
GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.
This is caused by improper handling of the memory protections for the buffer resource.