CVE-2025-46710

Published: Jun 16, 2025Modified: Jun 17, 2026

5.7

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 0.9 / Impact: 4.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Possible kernel exceptions caused by reading and writing kernel heap data after free.

Affected (4)

Products: Imaginationtech: Ddk

Imaginationtech

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Imaginationtech Ddk	From 1.15 to 24.2
Imaginationtech Ddk	Version 24.2
Imaginationtech Ddk	Version 24.2 rtm1
Imaginationtech Ddk	Version 24.2 rtm2

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (1)

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Source: 367425dc-4d06-4041-9650-c2dc6aaa27ce

Vendor Advisory

Timeline

No history available yet.