CVE-2025-46710 - Vulnerability Details - OpenCVE

Possible kernel exceptions caused by reading and writing kernel heap data after free.

No CVSS v4.0

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Imaginationtech	Ddk

Configuration 1 [-]

OR	cpe:2.3:a:imaginationtech:ddk::::::::
	cpe:2.3:a:imaginationtech:ddk:24.2:-::::::
	cpe:2.3:a:imaginationtech:ddk:24.2:rtm1::::::
	cpe:2.3:a:imaginationtech:ddk:24.2:rtm2::::::

No data.

References

Link	Providers
https://www.imaginationtech.com/gpu-driver-vulnerabilities/

History

Tue, 21 Oct 2025 16:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Imaginationtech Imaginationtech ddk
CPEs		cpe:2.3:a:imaginationtech:ddk:::::::: cpe:2.3:a:imaginationtech:ddk:24.2:-:::::: cpe:2.3:a:imaginationtech:ddk:24.2:rtm1:::::: cpe:2.3:a:imaginationtech:ddk:24.2:rtm2::::::
Vendors & Products		Imaginationtech Imaginationtech ddk

Mon, 23 Jun 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 5.7, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 16 Jun 2025 11:30:00 +0000

Type	Values Removed	Values Added
Description		Possible kernel exceptions caused by reading and writing kernel heap data after free.
Weaknesses		CWE-416
References		https://www.imaginationtech.com/gpu-driver-vulnerabilities/

MITRE

Status: PUBLISHED

Assigner: imaginationtech

Published: 2025-06-16T11:13:19.232Z

Updated: 2025-06-23T17:36:34.526Z

Reserved: 2025-04-28T18:57:24.838Z

Link: CVE-2025-46710

Vulnrichment

Updated: 2025-06-23T17:35:31.263Z

NVD

Status : Analyzed

Published: 2025-06-16T12:15:19.453

Modified: 2025-10-21T16:31:12.510

Link: CVE-2025-46710

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-46710", "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "state": "PUBLISHED", "assignerShortName": "imaginationtech", "dateReserved": "2025-04-28T18:57:24.838Z", "datePublished": "2025-06-16T11:13:19.232Z", "dateUpdated": "2025-06-23T17:36:34.526Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Linux", "Android"], "product": "Graphics DDK", "vendor": "Imagination Technologies", "versions": [{"lessThanOrEqual": "24.2 RTM2", "status": "affected", "version": "1.15 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "24.3 RTM", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Possible kernel exceptions caused by reading and writing kernel heap data after free.<br>"}], "value": "Possible kernel exceptions caused by reading and writing kernel heap data after free."}], "impacts": [{"capecId": "CAPEC-124", "descriptions": [{"lang": "en", "value": "CAPEC - CAPEC-124: Shared Resource Manipulation (Version 3.9)"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE - CWE-416: Use After Free (4.17)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "shortName": "imaginationtech", "dateUpdated": "2025-06-16T11:13:19.232Z"}, "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-06-23T17:36:29.179765Z", "id": "CVE-2025-46710", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-23T17:36:34.526Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-46710", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-23T17:36:29.179765Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-23T17:35:31.263Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-124", "descriptions": [{"lang": "en", "value": "CAPEC - CAPEC-124: Shared Resource Manipulation (Version 3.9)"}]}], "affected": [{"vendor": "Imagination Technologies", "product": "Graphics DDK", "versions": [{"status": "affected", "version": "1.15 RTM", "versionType": "custom", "lessThanOrEqual": "24.2 RTM2"}, {"status": "unaffected", "version": "24.3 RTM", "versionType": "custom"}], "platforms": ["Linux", "Android"], "defaultStatus": "unknown"}], "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Possible kernel exceptions caused by reading and writing kernel heap data after free.", "supportingMedia": [{"type": "text/html", "value": "Possible kernel exceptions caused by reading and writing kernel heap data after free.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE - CWE-416: Use After Free (4.17)"}]}], "providerMetadata": {"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "shortName": "imaginationtech", "dateUpdated": "2025-06-16T11:13:19.232Z"}}}, "cveMetadata": {"cveId": "CVE-2025-46710", "state": "PUBLISHED", "dateUpdated": "2025-06-23T17:36:34.526Z", "dateReserved": "2025-04-28T18:57:24.838Z", "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "datePublished": "2025-06-16T11:13:19.232Z", "assignerShortName": "imaginationtech"}, "dataVersion": "5.1"}