PT-2025-48439 · Softwarex · Softwarex

Published 2025-12-01 · Updated 2025-12-01 · CVE-2025-58408

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description Software installed and run as a non-privileged user may conduct improper GPU system calls, potentially triggering reads of stale data that can lead to kernel exceptions and write use-after-free conditions. The use-after-free condition arises because stale data can include handles to resources, leading to unbalanced reference counts and premature resource destruction while in use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-429381685

CVE-2025-58408

Affected Products

Softwarex

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-58408 · Security Note
• https://imaginationtech.com/gpu-driver-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-58408 · Vendor Advisory
• https://twitter.com/CVEnew/status/1995459186919186508 · Twitter Post
• https://t.me/cveNotify/144392 · Telegram Post
• https://t.me/CVEtracker/38536 · Telegram Post