CVE-2025-58407 — GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outsi…
Published: 2025-11-17 · CVSS: 7.4 · CVSS 3.1
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7