Use After Free in Imaginationtech Ddk
CVE-2025-58408
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in which the reference counts can become unbalanced. This can lead to the premature destruction of a resource while in use.
Vulnerability class: Use-After-Free
EPSS: 0.001 (2.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Imaginationtech Ddk
- Imagination Technologies Graphics Ddk — versions 1.15 RTM, 1.17 RTM, 1.18 RTM
Weakness classification (CWE)
References
- 367425dc-4d06-4041-9650-c2dc6aaa27ce (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-58408?
- CVE-2025-58408 is a medium-severity vulnerability in Imaginationtech Ddk, classified under Use After Free. CVSS score: 5.9/10. Published 2025-12-01.
- How severe is CVE-2025-58408?
- Medium severity. CVSS v3 base score is 5.9 out of 10.