VendorsImaginationtechddk26.1
Vulnerabilities

Imaginationtech DDK 26.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2026-16280
GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset
Published 2026-07-24 · Analyzed
9.8EPSS 0.005
CVE-2026-41154
GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse
Published 2026-07-10 · Analyzed
7.8EPSS 0.002
CVE-2026-7639
GPU DDK - Page UAF read in PMMETA_PROTECT heap memory
Published 2026-07-10 · Analyzed
7.8EPSS 0.002
CVE-2026-34196
GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem
Published 2026-07-10 · Analyzed
7.8EPSS 0.002
CVE-2026-49743
GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed
Published 2026-07-24 · Analyzed
7.8EPSS 0.002
CVE-2026-49744
GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()
Published 2026-07-24 · Analyzed
7.8EPSS 0.002
CVE-2026-49745
GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0
Published 2026-07-24 · Analyzed
7.8EPSS 0.002
CVE-2026-45195
GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted
Published 2026-06-26 · Analyzed
7.8EPSS 0.001
CVE-2026-45196
GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel
Published 2026-07-10 · Analyzed
7.8EPSS 0.001
CVE-2026-45203
GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU
Published 2026-07-10 · Analyzed
7.8EPSS 0.001
CVE-2026-34193
GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()
Published 2026-06-01 · Analyzed
4.3EPSS 0.002