Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-25176

GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
imaginationtech

Description

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imagination Technologies Graphics DDK

Default version status: unknown

  • 1.15 RTMaffected
  • 1.17 RTMaffected
  • 1.18 RTMaffected
  • 23.2 RTM to ≤ 25.2 RTMaffected
  • 25.3 RTMunaffected

References