CVE-2025-58407: Imaginationtech Ddk

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.

Affected products

Published 2025-11-17. Last modified 2026-10-07.