Improper GPU System Calls Leading to Memory Manipulation in Imagination Technologies Products

CVE-2025-0478

What is CVE-2025-0478?

A vulnerability exists in Imagination Technologies GPU drivers where software operating with non-privileged user rights may improperly invoke GPU system calls. This flaw can lead to unintended reads and writes to arbitrary physical memory pages, potentially corrupting data not allocated by the GPU driver. The exploit may affect memory pages currently utilized by the kernel and other drivers, causing unpredictable changes in functionality and system behavior.

References