PT-2026-2471 · Gpu · Gpu

CVE-2025-58409 · Publicado 2026-01-13 · Atualizado 2026-01-13

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Baixa

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU hardware to write to arbitrary physical memory pages. This could allow corruption of data pages not allocated by the GPU driver, including memory pages used by the kernel and drivers, potentially altering their behavior. The GPU may perform write operations on restricted internal GPU buffers, leading to corrupted arbitrary physical memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ASB-A-440384860

CVE-2025-58409

Produtos afetados

Gpu

Referências · 4

• https://osv.dev/vulnerability/CVE-2025-58409 · Aviso do Fabricante
• https://imaginationtech.com/gpu-driver-vulnerabilities · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-58409 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011120634894389520 · Publicação no Twitter