CVE-2025-25176: Imaginationtech Ddk

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.

Affected products

• Imaginationtech Ddk: before 25.3 (fixed in 25.3)

Published 2026-01-13. Last modified 2026-06-17.