VULNERABILITY INTELLIGENCE
CVE-2025-10865
CVSS score7.8 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for use after free was present.
Weakness classification
- 367425dc-4d06-4041-9650-c2dc6aaa27ce: CWE-416
Primary references
- 367425dc-4d06-4041-9650-c2dc6aaa27ce — Vendor Advisory