CVE-2025-0478

Published Mar 24, 2025

Last updated 8 days ago

Overview

Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform, altering their behaviour.
Source
367425dc-4d06-4041-9650-c2dc6aaa27ce
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

367425dc-4d06-4041-9650-c2dc6aaa27ce
CWE-280

Social media

Hype score
Not currently trending