VendorsImaginationtechddkany version

Vulnerabilities

Imaginationtech DDK any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

32CVEs

CVE-2026-16280

GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset

Published 2026-07-24 · Analyzed

9.8EPSS 0.005

CVE-2025-13952

GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

Published 2026-01-24 · Analyzed

9.8EPSS 0.005

CVE-2026-21732

GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation

Published 2026-03-20 · Analyzed

9.6EPSS 0.003

CVE-2025-25176

GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world

Published 2026-01-13 · Analyzed

9.1EPSS 0.004

CVE-2025-58411

GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF

Published 2026-01-13 · Analyzed

8.8EPSS 0.002

CVE-2025-0467

GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write

Published 2025-04-18 · Analyzed

8.2EPSS 0.002

CVE-2026-22166

GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable

Published 2026-05-01 · Analyzed

8.1EPSS 0.004

CVE-2026-22165

GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

Published 2026-05-01 · Analyzed

8.1EPSS 0.003

CVE-2026-7639

GPU DDK - Page UAF read in PMMETA_PROTECT heap memory

Published 2026-07-10 · Analyzed

7.8EPSS 0.002

CVE-2026-41154

GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse

Published 2026-07-10 · Analyzed

7.8EPSS 0.002

CVE-2026-34196

GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem

Published 2026-07-10 · Analyzed

7.8EPSS 0.002

CVE-2026-49745

GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0

Published 2026-07-24 · Analyzed

7.8EPSS 0.002

CVE-2026-49744

GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()

Published 2026-07-24 · Analyzed

7.8EPSS 0.002

CVE-2026-49743

GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed

Published 2026-07-24 · Analyzed

7.8EPSS 0.002

CVE-2026-22167

GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory

Published 2026-05-01 · Analyzed

7.8EPSS 0.002

CVE-2026-45196

GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel

Published 2026-07-10 · Analyzed

7.8EPSS 0.001

CVE-2026-45195

GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

Published 2026-06-26 · Analyzed

7.8EPSS 0.001

CVE-2025-25179

GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory

Published 2025-06-02 · Analyzed

7.8EPSS 0.001

CVE-2025-10865

GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns

Published 2026-01-13 · Analyzed

7.8EPSS 0.001

CVE-2026-45203

GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU

Published 2026-07-10 · Analyzed

7.8EPSS 0.001

CVE-2026-22163

GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU

Published 2026-03-20 · Analyzed

7.8EPSS 0.001

CVE-2026-21734

GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation

Published 2026-06-26 · Analyzed

7.7EPSS 0.002

CVE-2025-46709

GPU DDK - Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leak

Published 2025-08-08 · Analyzed

7.5EPSS 0.003

CVE-2026-21733

GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)

Published 2026-04-17 · Analyzed

7.3EPSS 0.001

CVE-2023-4969

GPU kernel implementations susceptible to memory leak

Published 2024-01-16 · Modified

6.5EPSS 0.012

CVE-2025-58408

GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code

Published 2025-12-01 · Analyzed

5.9EPSS 0.001

CVE-2025-46710

Possible kernel exceptions caused by reading and writing kernel heap data after free.

Published 2025-06-16 · Analyzed

5.7EPSS 0.002

CVE-2025-46711

GPU DDK - NULL Pointer dereference occurs in LockHandle on bridge entry when connection misused

Published 2025-09-22 · Analyzed

5.5EPSS 0.001

CVE-2025-46707

GPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it

Published 2025-06-27 · Analyzed

5.2EPSS 0.001

CVE-2026-34193

GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()

Published 2026-06-01 · Analyzed

4.3EPSS 0.002

CVE-2025-46708

GPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs

Published 2025-06-27 · Analyzed

4.3EPSS 0.002

CVE-2025-58409

GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory

Published 2026-01-13 · Analyzed

3.5EPSS 0.002

Imaginationtech DDK any version

Security check