Write Use-After-Free Vulnerability in GPU Shader Compiler by Imagination Technologies
CVE-2025-13952
9.8CRITICAL
What is CVE-2025-13952?
A vulnerability exists in the GPU shader compiler library of Imagination Technologies, triggered by web pages containing unconventional GPU shader code. This issue leads to a write use-after-free scenario, where the compiler retains a pointer to a previously freed memory object. If exploited on platforms with elevated system privileges, it poses a risk for further exploitation of the device, highlighting the need for robust security measures when processing external shader code.
Affected Version(s)
Graphics DDK Linux 25.1 RTM <= 25.2 RTM
Graphics DDK Linux 1.17 RTM
Graphics DDK Linux 1.18 RTM
