CVE-2025-46707

Summary

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.

Affected Software

VendorProductVersion RangeStatus
Imagination TechnologiesGraphics DDK1.15 RTMaffected
Imagination TechnologiesGraphics DDK1.17 RTMaffected
Imagination TechnologiesGraphics DDK1.18 RTMaffected
Imagination TechnologiesGraphics DDK23.2 RTM1 <= 23.3 RTMaffected
Imagination TechnologiesGraphics DDK24.1 RTMunaffected

Weaknesses

  • CWE-668: CWE - CWE-668: Exposure of Resource to Wrong Sphere

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References