CVE-2026-49744

GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-49743

GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed

Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlying synchronisation primitive is not properly incremented. This can be exploited, by destroying the exported fence and prematurely release the underlying primitive, resulting in a potential use-after-free condition.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-49745

GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. These can be used to escalate privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-16280

GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-34193

GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()

Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host (Kernel) to perform arbitrary writes to firmware memory.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-34196

GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the second mapping The second virtual mapping references a physical address that has been freed after the first virtual mapping has been freed. This allows the physical memory to be allocated (for example) by another process and read/written to.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-41154

GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse

Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads to OOB access.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-45196

GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-45203

GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but before use.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-7639

GPU DDK - Page UAF read in PMMETA_PROTECT heap memory

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete cleanup of an internal driver state, allowing for future unauthorized access to the contents of the physical memory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-21733

GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handling of GPU memory reservation protections.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Google Imaginationtech Linux

Products

Android Ddk Graphics Ddk and 1 more

CVE-2026-21734

GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-45195

GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-22165

GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-22166

GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-22167

GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory

Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour. This attack can lead the GPU to perform write operations on restricted internal GPU buffers that can lead to a second order affect of corrupted arbitrary physical memory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-21732

GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-22163

GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt to synchronise access to the resource.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2026-21736

GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk Graphics Ddk

CVE-2024-43703

GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Imaginationtech

Products

Ddk