CVE-2025-13952

CVE-2025-13952 is a critical write use-after-free vulnerability affecting the imaginationtech ddk GPU shader compiler library. It occurs when a web page containing malicious GPU shader code is loaded, causing the compiler to access a freed memory object. This vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating it can be exploited remotely without user interaction to achieve high confidentiality, integrity, and availability impacts, potentially leading to system compromise on platforms where the compiler process has system privileges. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness and potential interest in developing exploits.