← Back

CVE-2025-46708

nvd nist
Published: Jun 27, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 0.9 / Impact: 3.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.

Affected (4)

Products: Imaginationtech: Ddk
Imaginationtech
1 product
Ddk
Configuration A
4 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Imaginationtech
Ddk
From 23.2 to 24.2
Ddk
Version 1.15 rtm
Ddk
Version 1.17 rtm
Ddk
Version 1.18 rtm
Running on/withPlatform Versions
Google
Android
All versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-280
Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

References (1)

Source: 367425dc-4d06-4041-9650-c2dc6aaa27ce
Vendor Advisory

Timeline

No history available yet.