Imagination Technologies vulnerabilities, page 5

87 vulnerabilities

Known vulnerabilities in Imagination Technologies products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

7.1CVE-2026-49746imagination technologiesgraphics ddk
EPSS score
0.15%
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.7.8CVE-2026-49743imagination technologiesgraphics ddk+1
EPSS score
0.16%
Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlying synchronisation primitive is not properly incremented. This can be exploited, by destroying the exported fence and prematurely release the underlying primitive, resulting in a potential use-after-free condition.7.1CVE-2026-34194imagination technologiesgraphics ddk
EPSS score
0.15%
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. The product accidentally refers to the wrong memory due to the semantics of how math operations are implicitly scaled across buffers of different sizes.7.7CVE-2026-34192imagination technologiesgraphics ddk
EPSS score
0.16%
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.7.8CVE-2026-34196imagination technologiesgraphics ddk+1
EPSS score
0.17%
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the second mapping The second virtual mapping references a physical address that has been freed after the first virtual mapping has been freed. This allows the physical memory to be allocated (for example) by another process and read/written to.4.3CVE-2026-34193imagination technologiesgraphics ddk+1
EPSS score
0.22%
Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host (Kernel) to perform arbitrary writes to firmware memory.8.8CVE-2026-34195imagination technologiesgraphics ddk
EPSS score
0.48%
Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping.