PT-2026-2471 · Gpu · Gpu

Published 2026-01-13 · Updated 2026-01-13 · CVE-2025-58409

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU hardware to write to arbitrary physical memory pages. This could allow corruption of data pages not allocated by the GPU driver, including memory pages used by the kernel and drivers, potentially altering their behavior. The GPU may perform write operations on restricted internal GPU buffers, leading to corrupted arbitrary physical memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ASB-A-440384860

CVE-2025-58409

Affected Products

Gpu

References · 4

• https://osv.dev/vulnerability/CVE-2025-58409 · Vendor Advisory
• https://imaginationtech.com/gpu-driver-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58409 · Security Note
• https://twitter.com/CVEnew/status/2011120634894389520 · Twitter Post