CVE-2024-12837 Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.

Affected products and versions

Product	Affected versions	Fixed in
Graphics DDK	Versions not published

Other CVEs of Graphics DDK

The 95 CVEs of Graphics DDK →

CVE-2026-74915 GPU DDK - OOB write in UntwiddlePOTSquare64bpp 8.8 High CVE-2026-74912 GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB 9.8 Critical CVE-2026-19199 GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet 7.1 High CVE-2026-18629 GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation 7.5 High