CVE-2025-25178

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1284

Affected software

No affected versions have been published.

Timeline

Published
Apr 4, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-251797.8Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical mCVE-2025-25187.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a deniaCVE-2025-251807.8Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical mCVE-2025-251817.5A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL CVE-2025-251829.4Stroom is a data processing, storage and analysis platform. A vulnerability exists starting in version 7.2-beta.53 and prior to versions 7.2CVE-2025-251832.6vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash coCVE-2025-251846.5Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be CVE-2025-251857.5GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for softCVE-2025-251866.5Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0CVE-2025-251875.4Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulCVE-2025-251885.7Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3CVE-2025-251895.5The ZOO-Project is an open source processing platform. A reflected Cross-Site Scripting vulnerability exists in the ZOO-Project Web Processi
CVE-2025-25178: High severity, CVSS 7.8 | Vulnix