CVE-2025-25179 — Improper Handling of Insufficient Permissions or Privileges in Technologies Graphics DDK

CWE-280 — Improper Handling of Insufficient Permissions or Privileges3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 79.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Imagination Technologies Graphics DDKImaginationtech DDKGoogle Android
Timeline
PublishedJun 2
Latest updateSep 1

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5imagination_technologies/graphics_ddk23.2 RTM — 24.3 RTM+3

🔴Vulnerability Details

1
GHSA
GHSA-9q3q-h6mj-695h: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory page↗2025-06-02
▶

📋Vendor Advisories

1
Android
CVE-2025-25179: PowerVR-GPU↗2025-09-01
▶