Imagination Technologies Graphics DDK vulnerabilities, page 5
87 vulnerabilities
Known vulnerabilities in Imagination Technologies Graphics DDK, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-49746imagination technologies · graphics ddkGPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMemSoftware installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages.
Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.EPSS0.15%HighCVE-2026-49743imagination technologies · graphics ddk +1 moreGPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closedSoftware installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs.
During workload submission involving a fence exported by the GPU driver, the reference count of the underlying synchronisation primitive is not properly incremented. This can be exploited, by destroying the exported fence and prematurely release the underlying primitive, resulting in a potential use-after-free condition.EPSS0.16%HighCVE-2026-34194imagination technologies · graphics ddkGPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index countSoftware installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation.
The product accidentally refers to the wrong memory due to the semantics of how math operations are implicitly scaled across buffers of different sizes.EPSS0.15%HighCVE-2026-34192imagination technologies · graphics ddkGPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entriesSoftware installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables.
The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.EPSS0.16%HighCVE-2026-34196imagination technologies · graphics ddk +1 moreGPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMemSoftware installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the second mapping
The second virtual mapping references a physical address that has been freed after the first virtual mapping has been freed. This allows the physical memory to be allocated (for example) by another process and read/written to.EPSS0.17%MediumCVE-2026-34193imagination technologies · graphics ddk +1 moreGPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory.
A logic error in the address translation allowed a compromised Host (Kernel) to perform arbitrary writes to firmware memory.EPSS0.22%HighCVE-2026-34195imagination technologies · graphics ddkGPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexesSoftware installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel.
The product incorrectly indexes internal state when performing sparse allocation remapping.EPSS0.48%