CVE-2025-46708

Summary

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.

Affected Software

VendorProductVersion RangeStatus
Imagination TechnologiesGraphics DDK1.15 RTMaffected
Imagination TechnologiesGraphics DDK1.17 RTMaffected
Imagination TechnologiesGraphics DDK1.18 RTMaffected
Imagination TechnologiesGraphics DDK23.2 RTM <= 24.1 RTMaffected
Imagination TechnologiesGraphics DDK24.2 RTM1unaffected

Weaknesses

  • CWE-280: CWE - CWE-280: Improper Handling of Insufficient Permissions or Privileges (4.15)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References