First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-46710

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Possible kernel exceptions caused by reading and writing kernel heap data after free.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Imagination Technologies	Graphics DDK	>= 1.15 RTM, <= 24.2 RTM2

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/Vendor Advisory

Timeline

Published: Jun 16, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-467115.5Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel excepti CVE-2025-467123.7Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-2 CVE-2025-467137.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 0.0.1 and prio CVE-2025-467147.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prio CVE-2025-467157.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prio CVE-2025-467165.5Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prio CVE-2025-467173.3sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privile CVE-2025-467183.3sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. exe CVE-2025-467195.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability i CVE-2025-46728.8The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission CVE-2025-467204.3Keystone is a content management system for Node.js. Prior to version 6.5.0, `{field}.isFilterable` access control can be bypassed in `updat CVE-2025-467216.1nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who

CVE-2025-46710: Medium severity, CVSS 5.7 | Vulnix