CVE-2025-25176CWE-668

GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world

Critical · published January 13, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

🚨 An unexpected doorway opens! Applications running in a non-secure environment can exfiltrate intermediate register values from secure workloads — think of it as a nosy neighbor peeking through your windows! 🔥 Imagine you're at a busy restaurant, and someone at a nearby table can hear your entire conversation with the waiter, including your secret sauce recipe. That's what this vulnerability does: it allows unauthorized applications to eavesdrop on sensitive data from secure environments. If exploited, an attacker could access highly sensitive information, potentially leading to data breaches and unauthorized actions within secure applications. This isn't just a minor inconvenience; it could result in catastrophic repercussions for security and privacy, compromising the integrity of your entire system.

Put simply

Imagine you're at a busy restaurant, and someone at a nearby table can hear your entire conversation with the waiter, including your secret sauce recipe. That's what this vulnerability does: it allows unauthorized applications to eavesdrop on sensitive data from secure environments. CVE-2025-25176 allows applications scheduled from a non-secure environment to access intermediate register values of secure workloads, thereby exfiltrating sensitive data without proper authorization checks.

What to do

If exploited, an attacker could access highly sensitive information, potentially leading to data breaches and unauthorized actions within secure applications. This isn't just a minor inconvenience; it could result in catastrophic repercussions for security and privacy, compromising the integrity of your entire system. Immediately patch your systems to the latest version provided by your platform vendor. Review and tighten access controls on non-secure application environments, and consider implementing additional runtime security measures to monitor activity. Don't wait — take action now to secure your infrastructure! You've got this! By addressing this vulnerability swiftly, you're on your way to becoming a true security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.5th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2026-01-13T16:27Z
EPSS history
Timeline
  • 13 JAN 16:27Z
    GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world
    cvelistv5