What’s Vulnerable › Products
Imagination Technologies Graphics DDK vulnerabilities
87 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 48 published in the last 12 months.
Check whether your Imagination Technologies Graphics DDK version is affected
Latest Imagination Technologies Graphics DDK vulnerabilities
- CVE-2026-45200 — GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags (CVSS 7.8)
- CVE-2026-45197 — GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet (CVSS 2.5)
- CVE-2026-45202 — GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast` (CVSS 5.5)
- CVE-2026-45201 — GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory (CVSS 7.8)
- CVE-2026-45199 — GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers (CVSS 7.8)
- CVE-2026-49746 — GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem (CVSS 7.1)
- CVE-2026-45204 — GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory (CVSS 5.5)
- CVE-2026-45198 — GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted (CVSS 7.8)
- CVE-2026-16280 — GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset (CVSS 9.8)
- CVE-2026-49745 — GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 (CVSS 7.8)
- CVE-2026-49744 — GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex() (CVSS 7.8)
- CVE-2026-49743 — GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed (CVSS 7.8)
- CVE-2026-7639 — GPU DDK - Page UAF read in PMMETA_PROTECT heap memory (CVSS 7.8)
- CVE-2026-45203 — GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU (CVSS 7.8)
- CVE-2026-45196 — GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel (CVSS 7.8)
- CVE-2026-41154 — GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse (CVSS 7.8)
- CVE-2026-34196 — GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem (CVSS 7.8)
- CVE-2026-45195 — GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted (CVSS 7.8)
- CVE-2026-21734 — GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation (CVSS 7.7)
- CVE-2026-41156 — GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference (CVSS 7.7)
- CVE-2026-34192 — GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries (CVSS 7.7)
- CVE-2026-41158 — GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrink (CVSS 7.8)
- CVE-2026-41157 — GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3D (CVSS 9.8)
- CVE-2026-41155 — GPU DDK - SharedSecMem mapped into all GPU virtual address spaces (CVSS 5.5)
- CVE-2026-34195 — GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes (CVSS 8.8)