CVE-2025-58407 GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
A TOCTOU race condition in the GPU driver allows a guest VM to escape isolation and read or write arbitrary memory, requiring a patch.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-58407?
CVE-2025-58407 is a high-severity vulnerability in Imagination Technologies Graphics DDK, published on 17 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
Weakness: CWE-367
Which versions are affected by CVE-2025-58407?
It affects 1 product.
Products include Imaginationtech Ddk.
How do I fix CVE-2025-58407?
Apply the vendor's patch.
Is CVE-2025-58407 being exploited?
There is no known exploitation of CVE-2025-58407 in the wild and no public exploit code.
Other vulnerabilities in Imagination Technologies Graphics DDK
- CVE-2026-16280 GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset
- CVE-2025-13952 GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP
- CVE-2026-21732 GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation
- CVE-2025-25176 GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world
- CVE-2025-58411 GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF
Sources
Also known as A-449121737, ASB-A-449121737, GHSA-2pf4-7467-2jm6.