7.7
Élevée
CVE-2026-41156 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of…
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario. A shared resource (memory page) managed by a CPU thread of control (driver) and accessed by a GPU thread of control (Firmware) can cause a write UAF when the CPU thread frees the resource before the GPU FW has finished accessing it.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Graphics DDK | Versions non publiées |
Autres CVE de Graphics DDK
Les 95 CVE de Graphics DDK →
CVE-2026-74915
GPU DDK - OOB write in UntwiddlePOTSquare64bpp
8.8
Élevée
CVE-2026-74912
GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB
9.8
Critique
CVE-2026-19199
GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet
7.1
Élevée
CVE-2026-18629
GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation
7.5
Élevée