Skip to content

Known vulnerabilities in Imagination Technologies Graphics DDK

Is your version affected?

CVE Summary Score Published
CVE-2026-74915 GPU DDK - OOB write in UntwiddlePOTSquare64bpp 8.8 High Oct 30, 2026
CVE-2026-74912 GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB 9.8 Critical Oct 30, 2026
CVE-2026-19199 GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet 7.1 High Oct 30, 2026
CVE-2026-18629 GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation 7.5 High Oct 30, 2026
CVE-2026-65587 GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change 5.5 Medium Oct 30, 2026
CVE-2026-65586 GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM 7.1 High Oct 30, 2026
CVE-2026-65584 GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo 7.8 High Oct 30, 2026
CVE-2026-15466 GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM() 7.0 High Oct 30, 2026
CVE-2026-45197 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read… 2.5 Low Sep 4, 2026
CVE-2026-45200 Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an… 7.8 High Sep 4, 2026
CVE-2026-45202 Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and… 5.5 Medium Aug 21, 2026
CVE-2026-45201 Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size… 7.8 High Aug 21, 2026
CVE-2026-45199 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a… 7.8 High Aug 21, 2026
CVE-2026-49746 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel… 7.1 High Aug 7, 2026
CVE-2026-45204 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and… 5.5 Medium Aug 7, 2026
CVE-2026-45198 Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause… 7.8 High Aug 7, 2026
CVE-2026-16280 An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address… 9.8 Critical Jul 24, 2026
CVE-2026-49745 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a… 7.8 High Jul 24, 2026
CVE-2026-49744 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a… 7.8 High Jul 24, 2026
CVE-2026-49743 Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of… 7.8 High Jul 24, 2026
CVE-2026-45203 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a… 7.8 High Jul 10, 2026
CVE-2026-45196 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU… 7.8 High Jul 10, 2026
CVE-2026-7639 Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use… 7.8 High Jul 10, 2026
CVE-2026-41154 Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls 7.8 High Jul 10, 2026
CVE-2026-34196 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow… 7.8 High Jul 10, 2026