« Volver al listado

CVE-2025-46708

Estado: AnalizadaMedia (4.3)—

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Imaginationtech — DDK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-46708",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-46708",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-01T16:14:55.016435Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "affectedData": [
        {
          "vendor": "Imagination Technologies",
          "product": "Graphics DDK",
          "versions": [
            {
              "status": "affected",
              "version": "1.15 RTM",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.17 RTM",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "1.18 RTM",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "23.2 RTM",
              "versionType": "custom",
              "lessThanOrEqual": "24.1 RTM"
            },
            {
              "status": "unaffected",
              "version": "24.2 RTM1",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Linux",
            "Android"
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2025-06-27T17:15:33.803",
  "references": [
    {
      "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "description": [
        {
          "lang": "en",
          "value": "CWE-280"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU."
    },
    {
      "lang": "es",
      "value": "El software instalado y ejecutándose dentro de una máquina virtual invitada puede realizar llamadas de sistema de GPU incorrectas para evitar que otros invitados ejecuten trabajos en la GPU."
    }
  ],
  "lastModified": "2026-06-17T09:26:50.673",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11F1342C-2361-4D08-99D4-F33FE0938AD6",
              "versionEndExcluding": "24.2",
              "versionStartIncluding": "23.2"
            },
            {
              "criteria": "cpe:2.3:a:imaginationtech:ddk:1.15:rtm:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF75D077-B047-4EB7-B180-B0A1951E4235"
            },
            {
              "criteria": "cpe:2.3:a:imaginationtech:ddk:1.17:rtm:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F3982F4-C51E-4945-9292-A127D8A179C0"
            },
            {
              "criteria": "cpe:2.3:a:imaginationtech:ddk:1.18:rtm:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E59C8A78-04CD-4B78-96CB-7F49D90D10A9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
}