CVE-2025-6573: GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-09 · updated 2026-06-17
Weakness: CWE-280

Description

Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from the trusted execution environment (TEE).

Affected products

Imagination Technologies Graphics DDK: from 23.2 RTM through 24.3 RTM; 1.15 RTM, 1.17 RTM, 1.18 RTM

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Get alerted when CVE-2025-6573 or the next vulnerability affects your stack