CVE-2025-20788
In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no add
CVSS
4.4
Medium
EPSS
0.1%
p0
KEV
—
Exploit Today
0
0-100
Published: Dec 2, 2025 · Last modified: Oct 18, 2026 · CWE-1262
0.1%EPSS · 30 days0.1%
2026-09-222026-10-19
In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-332076.8 MED3.9%
——1NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.7dCVE-2025-54509—2.2%
——1Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.89d