Imaginationtech - vulnerabilities (CVEs)

55 CVEs in 3 products, 0 in the last 30 days, newest from 2026-07-24.

Products

Ddk - 40 CVEs
Powervr-gpu - 14 CVEs
Graphics Ddk - 1 CVEs

Newest CVEs of Imaginationtech

CVE-2026-16280 - CVSS 9.8 (critical), 2026-07-24: An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This…
CVE-2026-49745 - CVSS 7.8 (high), 2026-07-24: Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's…
CVE-2026-49744 - CVSS 7.8 (high), 2026-07-24: Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's…
CVE-2026-49743 - CVSS 7.8 (high), 2026-07-24: Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the…
CVE-2026-45203 - CVSS 7.8 (high), 2026-07-10: Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of…
CVE-2026-45196 - CVSS 7.8 (high), 2026-07-10: Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to…
CVE-2026-7639 - CVSS 7.8 (high), 2026-07-10: Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating…
CVE-2026-41154 - CVSS 7.8 (high), 2026-07-10: Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in…
CVE-2026-34196 - CVSS 7.8 (high), 2026-07-10: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to…
CVE-2026-45195 - CVSS 7.8 (high), 2026-06-26: Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted…
CVE-2026-21734 - CVSS 7.7 (high), 2026-06-26: A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader…
CVE-2026-34193 - CVSS 4.3 (medium), 2026-06-01: Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended…
CVE-2026-22166 - CVSS 8.1 (high), 2026-05-01: A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared…
CVE-2026-22165 - CVSS 8.1 (high), 2026-05-01: A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared…
CVE-2026-22167 - CVSS 7.8 (high), 2026-05-01: Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under…
CVE-2026-21733 - CVSS 7.3 (high), 2026-04-17: Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and…
CVE-2026-22163 - CVSS 7.8 (high), 2026-03-20: Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU…
CVE-2026-21732 - CVSS 9.6 (critical), 2026-03-20: A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader…
CVE-2026-21736 - CVSS 4.4 (medium), 2026-03-09: Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This…
CVE-2025-13952 - CVSS 9.8 (critical), 2026-01-24: A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU…
CVE-2025-10865 - CVSS 7.8 (high), 2026-01-13: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential…
CVE-2025-58409 - CVSS 3.5 (low), 2026-01-13: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under…
CVE-2025-58411 - CVSS 8.8 (high), 2026-01-13: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a…
CVE-2025-25176 - CVSS 9.1 (critical), 2026-01-13: Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a…
CVE-2025-58408 - CVSS 5.9 (medium), 2025-12-01: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions…
CVE-2025-58407 - CVSS 7.4 (high), 2025-11-17: Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or…
CVE-2025-58410 - CVSS 7.5 (high), 2025-11-17: Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.…
CVE-2025-46711 - CVSS 5.5 (medium), 2025-09-22: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions.
CVE-2025-46709 - CVSS 7.5 (high), 2025-08-09: Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.
CVE-2025-46708 - CVSS 4.3 (medium), 2025-06-27: Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.