PT-2026-4563 · Unknown · Gpu Shader Compiler Library

Published 2026-01-24 · Updated 2026-01-26 · CVE-2025-13952

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GPU shader compiler library (affected versions not specified)

Description Loading a web page with unusual GPU shader code into the GPU compiler process can cause a write use-after-free crash within the GPU shader compiler library. This occurs because the shader code triggers a path in the compiler that uses a pointer to a memory object that has already been freed. On some platforms, if the compiler process has system privileges, this could potentially lead to further exploitation of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-464496427

CVE-2025-13952

Affected Products

Gpu Shader Compiler Library

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-13952 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13952 · Vendor Advisory
• https://imaginationtech.com/gpu-driver-vulnerabilities · Vendor Advisory
• https://t.me/CVEtracker/42913 · Telegram Post
• https://twitter.com/TheHackerWire/status/2015834073168818568 · Twitter Post
• https://t.me/cveNotify/149775 · Telegram Post
• https://twitter.com/CVEnew/status/2014995796970938834 · Twitter Post