CVE-2025-10865

High · 7.8

CVSS

7.8

EPSS

0.1%

Published

Jan 13, 2026

CISA due date

—

The record

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for use after free was present.

Affected packages

Ecosystem	Package	Introduced	Fixed