Approved changes feed: RSS · Atom

cpe:2.3:a:imaginationtech:ddk:25.2:rtm:*:*:*:*:*:*

part: a version: 25.2 update: rtm

VendorImaginationtech (f3251a23-15dc-5413-b4a9-b935a1e89e99)
ProductDdk (072eb4a2-c100-5846-bfad-911da556ac79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58410 vulnerable 2026-06-08 07:35:18.106331 GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
Published: 2025-11-17T16:57:05.418Z
Updated: 2025-11-17T20:55:22.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58407 vulnerable 2026-06-08 07:35:18.092409 GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
Published: 2025-11-17T17:18:18.831Z
Updated: 2025-11-17T17:35:06.099Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.