GPU Firmware Exploit in Guest VM for Imagination Technologies

CVE-2025-0467

What is CVE-2025-0467?

A vulnerability exists in the GPU firmware that allows kernel software running inside a Guest Virtual Machine (VM) to exploit shared memory with the GPU. This can lead to unauthorized memory writes outside of the VM's isolated GPU memory space, posing a security risk to the integrity of the host system and other VMs. Proper mitigation strategies are essential to prevent potential exploits from compromising sensitive data and system performance.

References