Product by Imagination Technologies
Imagination Technologies Graphics DDK
35 known vulnerabilities in Imagination Technologies Graphics DDK (Imagination Technologies), 0 of them actively exploited (CISA KEV).
Key figures
35
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-16280 | GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset | 9.8 | |
| Critical | CVE-2025-13952 | GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP | 9.8 | |
| Medium | CVE-2023-4969 | GPU kernel implementations susceptible to memory leak | 6.5 | |
| Critical | CVE-2026-21732 | GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation | 9.6 | |
| Critical | CVE-2025-25176 | GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world | 9.1 | |
| High | CVE-2026-22166 | GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable | 8.1 | |
| High | CVE-2026-22165 | Imagination Technologies Graphics DDK: Use After Free | 8.1 | |
| High | CVE-2026-49744 | GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex() | 7.8 | |
| High | CVE-2026-49745 | GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 | 7.8 | |
| High | CVE-2026-49743 | Imagination Technologies Graphics DDK: Use After Free | 7.8 | |
| High | CVE-2026-7639 | GPU DDK - Page UAF read in PMMETA_PROTECT heap memory | 7.8 | |
| High | CVE-2026-41154 | GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse | 7.8 | |
| High | CVE-2026-34196 | Imagination Technologies Graphics DDK: Use After Free | 7.8 | |
| High | CVE-2026-45196 | Imagination Technologies Graphics DDK: Improper Handling of Insufficient Permissions or Privileges | 7.8 | |
| High | CVE-2026-45203 | GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU | 7.8 | |
| High | CVE-2026-45195 | GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted | 7.8 | |
| High | CVE-2026-21734 | GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation | 7.7 | |
| High | CVE-2025-58411 | GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF | 8.8 | |
| High | CVE-2026-22167 | Imagination Technologies Graphics DDK: Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.8 | |
| High | CVE-2025-46709 | Imagination Technologies Graphics DDK: Use After Free | 7.5 | |
| High | CVE-2026-22163 | GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU | 7.8 | |
| High | CVE-2025-58410 | Imagination Technologies Graphics DDK: Improper Handling of Insufficient Permissions or Privileges | 7.5 | |
| High | CVE-2026-21733 | Imagination Technologies Graphics DDK: Improper Handling of Insufficient Permissions or Privileges | 7.3 | |
| High | CVE-2025-10865 | GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns | 7.8 | |
| High | CVE-2025-0467 | GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write | 8.2 |