CVE-2025-13952— GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. The shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object.

N/A

释放后使用

Imagination Graphics DDK 安全漏洞

Imagination Graphics DDK是英国Imagination公司的一款GPU驱动工具套件。 Imagination Graphics DDK存在安全漏洞，该漏洞源于GPU着色器编译器库中存在释放后重用，可能导致在具有系统权限的平台上执行进一步攻击。

N/A

N/A