CVE-2025-0010

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality, integrity, or availability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-00113.3Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address CVE-2025-00126.8Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged CVE-2025-00147.3Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentialCVE-2025-00157.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-priCVE-2025-00288.3An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary addressCVE-2025-00291.8Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writeCVE-2025-00314.6A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a diffeCVE-2025-00327.2Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcoCVE-2025-00336.0Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentialCVE-2025-00344.7Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cauCVE-2025-00357.3Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbiCVE-2025-00363.2In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause d