Imagination Technologies vulnerabilities, page 3
87 vulnerabilities
Known vulnerabilities in Imagination Technologies products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2024-43702imagination technologiesgraphics ddk
EPSS score0.32%
Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.CVE-2024-43703imagination technologiesgraphics ddkEPSS score0.37%
Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.CVE-2024-43704imagination technologiesgraphics ddkEPSS score0.17%
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process.CVE-2024-43701imagination technologiesgraphics ddkEPSS score0.13%
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.CVE-2024-46975imagination technologiesgraphics ddkEPSS score0.15%
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory.CVE-2024-46973imagination technologiesgraphics ddkEPSS score0.21%
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-46972imagination technologiesgraphics ddkEPSS score0.17%
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-46971imagination technologiesgraphics ddkEPSS score0.14%
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.CVE-2024-46974imagination technologiesgraphics ddkEPSS score0.16%
Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers.CVE-2024-12577imagination technologiesgraphics ddkEPSS score0.17%
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.CVE-2024-12837imagination technologiesgraphics ddkEPSS score0.17%
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.CVE-2024-12576imagination technologiesgraphics ddkEPSS score0.15%
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output.CVE-2026-21734imagination technologiesgraphics ddk+1EPSS score0.16%
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.
An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.CVE-2026-21736imagination technologiesgraphics ddk+1EPSS score0.13%
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory.
This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.CVE-2026-21732imagination technologiesgraphics ddk+1EPSS score0.30%
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.
An edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access.CVE-2026-21733imagination technologiesgraphics ddk+1EPSS score0.10%
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files.
This is caused by improper handling of GPU memory reservation protections.CVE-2026-16280imagination technologiesgraphics ddk+1EPSS score0.53%
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.CVE-2026-41157imagination technologiesgraphics ddkEPSS score0.52%
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.
The software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination.CVE-2026-41154imagination technologiesgraphics ddk+1EPSS score0.18%
Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls.
When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads to OOB access.CVE-2026-41156imagination technologiesgraphics ddkEPSS score0.16%
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario.
A shared resource (memory page) managed by a CPU thread of control (driver) and accessed by a GPU thread of control (Firmware) can cause a write UAF when the CPU thread frees the resource before the GPU FW has finished accessing it.