Vulnerabilities (CVE)

Filtered by vendor Imaginationtech Subscribe
Filtered by product Ddk
Total 8 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-46707 3 Google, Imaginationtech, Linux 3 Android, Ddk, Linux Kernel 2025-10-21 N/A 5.2 MEDIUM
Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.
CVE-2025-46708 3 Google, Imaginationtech, Linux 3 Android, Ddk, Linux Kernel 2025-10-21 N/A 4.3 MEDIUM
Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.
CVE-2025-46710 1 Imaginationtech 1 Ddk 2025-10-21 N/A 5.7 MEDIUM
Possible kernel exceptions caused by reading and writing kernel heap data after free.
CVE-2025-46709 1 Imaginationtech 1 Ddk 2025-10-17 N/A 7.5 HIGH
Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.
CVE-2025-46711 1 Imaginationtech 1 Ddk 2025-10-17 N/A 5.5 MEDIUM
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions.
CVE-2025-25179 1 Imaginationtech 1 Ddk 2025-07-11 N/A 7.8 HIGH
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.
CVE-2025-0467 1 Imaginationtech 1 Ddk 2025-07-11 N/A 8.2 HIGH
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
CVE-2023-4969 3 Amd, Imaginationtech, Khronos 261 Athlon 3000g, Athlon 3000g Firmware, Instinct Mi100 and 258 more 2025-06-20 N/A 6.5 MEDIUM
A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.