CVE-2025-0478

{"id": "CVE-2025-0478", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-03-24T12:15:13.227", "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "description": [{"lang": "en", "value": "CWE-280"}]}], "descriptions": [{"lang": "en", "value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages.\n\nUnder certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform, altering their behaviour."}, {"lang": "es", "value": "El software instalado y ejecutado por un usuario sin privilegios puede realizar llamadas indebidas al sistema de la GPU para ejecutar operaciones de lectura y escritura en p\u00e1ginas arbitrarias de memoria f\u00edsica. En determinadas circunstancias, este exploit podr\u00eda utilizarse para corromper p\u00e1ginas de datos no asignadas por el controlador de la GPU, sino p\u00e1ginas de memoria utilizadas por el kernel y los controladores de la plataforma, alterando as\u00ed su comportamiento."}], "lastModified": "2025-03-27T16:44:44.143", "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}