What’s Vulnerable › Vulnerabilities
CVE-2026-34195: GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-12 · updated 2026-10-25
- Weakness: CWE-787
Description
Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping.
Affected products
- Imagination Technologies Graphics DDK: from 25.1 RTM through 25.3 RTM; 24.2 RTM
References
Get alerted when CVE-2026-34195 or the next vulnerability affects your stack