Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete cleanup of an internal driver state, allowing for future unauthorized access to the contents of the physical memory.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.imaginationtech.com/gpu-driver-vulnerabilities/ Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · imaginationtechNVD modified 2026-10-25 15:10
Affected (CPE criteria) 2
cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*cpe:2.3:a:imaginationtech:ddk:26.1:rtm1:*:*:*:*:*:*
References 1
- https://www.imaginationtech.com/gpu-driver-vulnerabilities/ Vendor Advisory