{"id":"CVE-2025-0467","aliases":["A-382313133","ASB-A-382313133","EUVD-2025-11810","GHSA-c2rf-m726-rrr8"],"status":"published","title":"GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00181,"percentile":0.07754,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-823"],"published":"2025-04-18T00:32:02Z","modified":"2026-11-04T16:48:29Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2025-09-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2025-09-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"imagination technologies","product":"graphics ddk"},{"vendor":"imaginationtech","product":"ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0467"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-c2rf-m726-rrr8"},{"url":"https://source.android.com/security/bulletin/2025-09-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-0467","title":"GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-04-18T00:32:02.991Z","modified":"2025-04-21T13:34:48.602Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T14:32:53.475217Z"}],"euvd":[{"id":"EUVD-2025-11810","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-04-18T00:32:02Z","modified":"2025-04-21T13:34:48Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T20:52:19.235376Z"}],"ghsa":[{"id":"GHSA-c2rf-m726-rrr8","title":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU...","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-04-18T03:31:22Z","modified":"2025-04-21T15:31:17Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T15:01:58.520974Z"}],"nvd":[{"id":"CVE-2025-0467","description":"Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.","status":"published","published":"2025-04-18T01:15:32.13Z","modified":"2026-06-17T08:26:32.42Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-823"],"updated_at":"2026-11-02T14:11:00.810682Z"}],"osv":[{"id":"ASB-A-382313133","status":"published","published":"2025-09-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:07.135383Z"}]}}