Imagination Technologies vulnerabilities

Products

• Graphics Ddk 95

Newest

• imagination technologies graphics ddk GPU DDK - OOB write in UntwiddlePOTSquare64bpp CVE-2026-74915 8.8 HighOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB CVE-2026-74912 Fix available 9.8 CriticalOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet CVE-2026-19199 Fix available 7.1 HighOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation CVE-2026-18629 Fix available 7.5 HighOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change CVE-2026-65587 Fix available 5.5 MediumOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM CVE-2026-65586 Fix available 7.1 HighOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo CVE-2026-65584 7.8 HighOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM() CVE-2026-15466 Fix available 7.0 HighOctober 30, 2026
• imagination technologies graphics ddk GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags CVE-2026-45200 Fix available 7.8 HighSeptember 1, 2026
• imagination technologies graphics ddk GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet CVE-2026-45197 Fix available 2.5 LowSeptember 1, 2026
• imagination technologies graphics ddk GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast` CVE-2026-45202 Fix available 5.5 MediumAugust 21, 2026
• imagination technologies graphics ddk GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory CVE-2026-45201 Fix available 7.8 HighAugust 21, 2026
• imagination technologies graphics ddk GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers CVE-2026-45199 Fix available 7.8 HighAugust 21, 2026
• imagination technologies graphics ddk GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem CVE-2026-49746 Fix available 7.1 HighAugust 7, 2026
• imagination technologies graphics ddk GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory CVE-2026-45204 Fix available 5.5 MediumAugust 7, 2026
• imagination technologies graphics ddk GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted CVE-2026-45198 Fix available 7.8 HighAugust 7, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset CVE-2026-16280 Fix available 9.8 CriticalJuly 24, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 CVE-2026-49745 Fix available 7.8 HighJuly 24, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex() CVE-2026-49744 Fix available 7.8 HighJuly 24, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed CVE-2026-49743 Fix available 7.8 HighJuly 24, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU CVE-2026-45203 Fix available 7.8 HighJuly 10, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel CVE-2026-45196 Fix available 7.8 HighJuly 10, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Page UAF read in PMMETA_PROTECT heap memory CVE-2026-7639 Fix available 7.8 HighJuly 10, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse CVE-2026-41154 7.8 HighJuly 10, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem CVE-2026-34196 Fix available 7.8 HighJuly 10, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted CVE-2026-45195 Fix available 7.8 HighJune 26, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation CVE-2026-21734 Fix available 7.7 HighJune 26, 2026
• imagination technologies graphics ddk GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference CVE-2026-41156 Fix available 7.7 HighJune 19, 2026
• imagination technologies graphics ddk GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries CVE-2026-34192 Fix available 7.7 HighJune 19, 2026
• imagination technologies graphics ddk GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrink CVE-2026-41158 Fix available 7.8 HighJune 12, 2026
• imagination technologies graphics ddk GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3D CVE-2026-41157 Fix available 9.8 CriticalJune 12, 2026
• imagination technologies graphics ddk GPU DDK - SharedSecMem mapped into all GPU virtual address spaces CVE-2026-41155 Fix available 5.5 MediumJune 12, 2026
• imagination technologies graphics ddk GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes CVE-2026-34195 Fix available 8.8 HighJune 12, 2026
• imagination technologies graphics ddk GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index count CVE-2026-34194 Fix available 7.1 HighJune 8, 2026
• imagination technologies graphics ddk GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical CVE-2026-22164 Fix available 7.5 HighJune 8, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr() CVE-2026-34193 Fix available 4.3 MediumJune 1, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable CVE-2026-22166 Fix available 8.1 HighMay 1, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs CVE-2026-22165 Fix available 8.1 HighMay 1, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory CVE-2026-22167 Fix available 7.8 HighMay 1, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so) CVE-2026-21733 Fix available 7.3 HighApril 17, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU CVE-2026-22163 Fix available 7.8 HighMarch 20, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation CVE-2026-21732 Fix available 9.6 CriticalMarch 20, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled CVE-2026-21736 Fix available 4.4 MediumMarch 9, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP CVE-2025-13952 Fix available 9.8 CriticalJanuary 24, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns CVE-2025-10865 Fix available 7.8 HighJanuary 13, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF CVE-2025-58411 Fix available 8.8 HighJanuary 13, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory CVE-2025-58409 Fix available 3.5 LowJanuary 13, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world CVE-2025-25176 9.1 CriticalJanuary 13, 2026
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code CVE-2025-58408 Fix available 5.9 MediumDecember 1, 2025
• imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet CVE-2025-58407 Fix available 7.4 HighNovember 17, 2025
• Show olderLoading…