VULNERABILITY INTELLIGENCE
CVE-2025-58410
CVSS score7.5 HIGH
EPSS probability0.30%
CISA KEVNot currently listed
Published2025-11-17
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
Weakness classification
- 367425dc-4d06-4041-9650-c2dc6aaa27ce: CWE-280
Primary references
- 367425dc-4d06-4041-9650-c2dc6aaa27ce — Vendor Advisory