CVE-2025-0467— GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write
Quick assessment
Affected
Imagination Technologies Graphics DDK
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Imagination GPU Driver是Imagination公司的一个图形化驱动程序。 Imagination GPU Driver存在安全漏洞，该漏洞源于Guest VM中的内核软件可能利用共享内存写入GPU固件数据。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-0467
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write
Source: CVE Program / CVE List V5
Vulnerability Description
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用越界的指针偏移
Source: CVE Program / CVE List V5
Vulnerability Title
Imagination GPU Driver 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Imagination GPU Driver是Imagination公司的一个图形化驱动程序。 Imagination GPU Driver存在安全漏洞，该漏洞源于Guest VM中的内核软件可能利用共享内存写入GPU固件数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Imagination Technologies | Graphics DDK | 1.15 RTM ~ 24.3 RTM | - |
|
II. Public POCs for CVE-2025-0467
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0467
请登录查看更多情报信息。
News Coverage for CVE-2025-0467 (1)
IV. Related Vulnerabilities
Same product: Graphics DDK
-
CVE-2026-45197
GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegS -
CVE-2026-45200
GPU DDK - Double free in _FreeOSPages due to incorrect alloc -
CVE-2026-45202
GPU DDK - Silent High-Order CMA Memory Leak & Double Free in -
CVE-2026-45201
GPU DDK - Incorrect page size validation in PhysmemNewRamBac -
CVE-2026-45199
GPU DDK - rgxfw_to_ptr() does not reject FW private data poi
Same vendor: Imagination Technologies
-
CVE-2026-45197
GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegS -
CVE-2026-45200
GPU DDK - Double free in _FreeOSPages due to incorrect alloc -
CVE-2026-45202
GPU DDK - Silent High-Order CMA Memory Leak & Double Free in -
CVE-2026-45201
GPU DDK - Incorrect page size validation in PhysmemNewRamBac -
CVE-2026-45199
GPU DDK - rgxfw_to_ptr() does not reject FW private data poi
Same weakness: CWE-823
-
CVE-2026-45199
GPU DDK - rgxfw_to_ptr() does not reject FW private data poi -
CVE-2026-72642
Use of Out-of-range Pointer Offset in the Elasticsearch Mach -
CVE-2026-49746
GPU DDK - Dimension Mismatch and Integer Truncation in PMRDe -
CVE-2026-49745
GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write int -
CVE-2026-49744
GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()
V. Comments for CVE-2025-0467
No comments yet