What’s Vulnerable › Vulnerabilities
CVE-2025-58407: GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-11-17 · updated 2026-10-07
- Weakness: CWE-367
Description
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
Affected products
- Imagination Technologies Graphics DDK: 25.2-rtm
References
Get alerted when CVE-2025-58407 or the next vulnerability affects your stack