Vendor
Imagination Technologies
95 known vulnerabilities in products by Imagination Technologies, 0 of them actively exploited (CISA KEV).
Key figures
95
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-16280 | GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset | 9.8 | |
| Critical | CVE-2026-74912 | GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB | 9.8 | |
| High | CVE-2026-74915 | GPU DDK - OOB write in UntwiddlePOTSquare64bpp | 8.8 | |
| Critical | CVE-2025-13952 | GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP | 9.8 | |
| Critical | CVE-2026-41157 | GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3D | 9.8 | |
| Critical | CVE-2025-6573 | GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite | 9.8 | |
| High | CVE-2024-47897 | GPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write | 8.8 | |
| High | CVE-2026-18629 | Imagination Technologies Graphics DDK: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2026-65584 | GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo | 7.8 | |
| High | CVE-2026-34195 | Imagination Technologies Graphics DDK: Out-of-bounds Write | 8.8 | |
| High | CVE-2025-8109 | GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation | 8.8 | |
| Critical | CVE-2026-21732 | GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation | 9.6 | |
| Critical | CVE-2025-25176 | GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world | 9.1 | |
| High | CVE-2026-22166 | GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable | 8.1 | |
| High | CVE-2026-19199 | GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet | 7.1 | |
| High | CVE-2026-65586 | Imagination Technologies Graphics DDK: Use After Free | 7.1 | |
| High | CVE-2026-15466 | Imagination Technologies Graphics DDK: Use After Free | 7.0 | |
| High | CVE-2026-45200 | GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags | 7.8 | |
| High | CVE-2026-22165 | Imagination Technologies Graphics DDK: Use After Free | 8.1 | |
| High | CVE-2026-45201 | Imagination Technologies Graphics DDK: Improper Validation of Specified Quantity in Input | 7.8 | |
| High | CVE-2026-45199 | GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers | 7.8 | |
| High | CVE-2026-22164 | GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical | 7.5 | |
| High | CVE-2026-45198 | GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted | 7.8 | |
| High | CVE-2026-49744 | GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex() | 7.8 | |
| High | CVE-2026-49745 | GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 | 7.8 |
Products
| Graphics Ddk | 95 | 0 |