VULNERABILITY INTELLIGENCE
CVE-2025-0468
CVSS score7.1 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.
Weakness classification
- CWE-280: Improper Handling of Insufficient Permissions or Privileges