CVE-2025-13952 json
GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP
published 2026-01-24 9 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-4593
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 39%
- public exploits
- 0
- none known
Summary
A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.
The shader code contained in the web page executes a path in the compiler that held onto an out of date pointer, pointing to a freed memory object.
Patch / fix
- Imagination Technologies Graphics DDK 1.17 RTM, 1.18 RTM, 23.2 RTM, 24.1 RTM, 25.3 RTM
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 9 mo ago
Exploit prediction
0.45% chance of exploitation in the next 30 days, higher than 39% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Imagination Technologies Graphics DDK
Classification
- Weakness
-
- CWE-416 Use After Free
References
-
imaginationtech.com
/gpu-driver-vulnerabilities/
vendor-advisory
Sources
- CVE List CVE-2025-13952
- NVD CVE-2025-13952
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.