CVE-2025-25180
Last modified
CVE-2025-25180 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-25180?
How severe is CVE-2025-25180?
How do I fix CVE-2025-25180?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-25175A vulnerability has been identified in Simcenter Femap V2401…7.8
- CVE-2025-25176Intermediate register values of secure workloads can be exfi…9.1
- CVE-2025-25177Software installed and run as a non-privileged user may cond…5.1
- CVE-2025-25178Software installed and run as a non-privileged user may cond…7.8
- CVE-2025-25179Software installed and run as a non-privileged user may cond…7.8
- CVE-2025-2518IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Se…7.5
- CVE-2025-25181A SQL injection vulnerability in timeoutWarning.asp in Advan…7.5
- CVE-2025-25182Stroom is a data processing, storage and analysis platform. …9.4
- CVE-2025-25183vLLM is a high-throughput and memory-efficient inference and…2.6
- CVE-2025-25184Rack provides an interface for developing web applications i…6.5
- CVE-2025-25185GPT Academic provides interactive interfaces for large langu…7.5
- CVE-2025-25186Net::IMAP implements Internet Message Access Protocol (IMAP)…6.5
Are you affected by CVE-2025-25180?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST