CVE-2025-10865: Imaginationtech Ddk

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for use after free was present.

Affected products

• Imaginationtech Ddk: before 25.3 (fixed in 25.3)

Published 2026-01-13. Last modified 2026-06-17.