CVE-2025-13952

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13952", "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "state": "PUBLISHED", "assignerShortName": "imaginationtech", "dateReserved": "2025-12-03T11:48:53.858Z", "datePublished": "2026-01-24T02:26:49.238Z", "dateUpdated": "2026-01-26T15:13:20.874Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Linux", "Android"], "product": "Graphics DDK", "vendor": "Imagination Technologies", "versions": [{"status": "unaffected", "version": "1.17 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "1.18 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "23.2 RTM", "versionType": "custom"}, {"lessThanOrEqual": "24.2 RTM", "status": "unaffected", "version": "24.1 RTM", "versionType": "custom"}, {"lessThanOrEqual": "25.2 RTM", "status": "affected", "version": "25.1 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "25.3 RTM", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.<br><br>The shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object.<br>"}], "value": "A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\nThe shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object."}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC - CAPEC-129: Pointer Manipulation (Version 3.9)"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE - CWE-416: Use After Free (4.18)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "shortName": "imaginationtech", "dateUpdated": "2026-01-24T02:26:49.238Z"}, "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "source": {"discovery": "UNKNOWN"}, "title": "GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-26T15:11:28.356805Z", "id": "CVE-2025-13952", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-26T15:13:20.874Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13952", "assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "state": "PUBLISHED", "assignerShortName": "imaginationtech", "dateReserved": "2025-12-03T11:48:53.858Z", "datePublished": "2026-01-24T02:26:49.238Z", "dateUpdated": "2026-01-26T15:13:20.874Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Linux", "Android"], "product": "Graphics DDK", "vendor": "Imagination Technologies", "versions": [{"status": "unaffected", "version": "1.17 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "1.18 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "23.2 RTM", "versionType": "custom"}, {"lessThanOrEqual": "24.2 RTM", "status": "unaffected", "version": "24.1 RTM", "versionType": "custom"}, {"lessThanOrEqual": "25.2 RTM", "status": "affected", "version": "25.1 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "25.3 RTM", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.<br><br>The shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object.<br>"}], "value": "A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\nThe shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object."}], "impacts": [{"capecId": "CAPEC-129", "descriptions": [{"lang": "en", "value": "CAPEC - CAPEC-129: Pointer Manipulation (Version 3.9)"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "CWE - CWE-416: Use After Free (4.18)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "shortName": "imaginationtech", "dateUpdated": "2026-01-24T02:26:49.238Z"}, "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "source": {"discovery": "UNKNOWN"}, "title": "GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-13952", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-26T15:11:28.356805Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-26T15:12:18.902Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "platforms": ["Linux", "Android"], "product": "Graphics DDK", "vendor": "Imagination Technologies", "versions": [{"status": "unaffected", "version": "1.17 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "1.18 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "23.2 RTM", "versionType": "custom"}, {"lessThanOrEqual": "24.2 RTM", "status": "unaffected", "version": "24.1 RTM", "versionType": "custom"}, {"lessThanOrEqual": "25.2 RTM", "status": "affected", "version": "25.1 RTM", "versionType": "custom"}, {"status": "unaffected", "version": "25.3 RTM", "versionType": "custom"}]}], "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*", "matchCriteriaId": "99A33CBA-49C5-4976-B668-88F87F0FF575", "versionEndExcluding": "25.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\nThe shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object."}, {"lang": "es", "value": "Una p\u00e1gina web que contiene c\u00f3digo de sombreador de GPU inusual se carga desde Internet en el proceso del compilador de GPU y desencadena un fallo de escritura de uso despu\u00e9s de liberaci\u00f3n en la librer\u00eda del compilador de sombreadores de GPU. En ciertas plataformas, cuando el proceso del compilador tiene privilegios de sistema, esto podr\u00eda permitir explotaciones adicionales en el dispositivo.\n\nEl c\u00f3digo de sombreador contenido en la p\u00e1gina web ejecuta una ruta en el compilador que manten\u00eda un puntero obsoleto, apuntando a un objeto de memoria liberado."}], "id": "CVE-2025-13952", "lastModified": "2026-06-17T08:35:02.307", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13952", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-26T15:11:28.356805Z", "version": "2.0.3"}}]}, "published": "2026-01-24T03:16:00.360", "references": [{"source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "tags": ["Vendor Advisory"], "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}], "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "type": "Secondary"}]}

{}

{"created": "2026-01-26T11:48:55.711532+00:00", "updated": "2026-01-26T11:48:55.711608+00:00", "vendors": ["imaginationtech", "imaginationtech$PRODUCT$graphics_ddk"]}