EUVD-2026-26663

🗓️ 01 May 2026 15:59:56Reported by EUVDType

WebGPU content loads into the GPU GLES render process and can trigger a write use-after-free crash.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-22166	1 May 202615:59	–	attackerkb
CNNVD	Imagination Graphics DDK 资源管理错误漏洞	1 May 202600:00	–	cnnvd
CVE	CVE-2026-22166	1 May 202615:59	–	cve
Cvelist	CVE-2026-22166 GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable	1 May 202615:59	–	cvelist
NVD	CVE-2026-22166	1 May 202616:16	–	nvd
Positive Technologies	PT-2026-36497	1 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-22166	5 Jun 202619:45	–	redhatcve
Vulnrichment	CVE-2026-22166 GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable	1 May 202615:59	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "7128394f-c999-3069-a08c-5ce0dc8eb984",
        "vendor": {
          "name": "Imagination Technologies"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "08e82862-7750-3ddc-8bfc-774840701d50",
        "product": {
          "name": "Graphics DDK"
        },
        "product_version": "24.1 RTM ≤24.2 RTM"
      },
      {
        "id": "51e9c2ba-abfe-3537-906c-d83ee5f1ffcf",
        "product": {
          "name": "Graphics DDK"
        },
        "product_version": "1.18 RTM"
      },
      {
        "id": "9024f274-deb6-305a-96f5-9c278fac92b7",
        "product": {
          "name": "Graphics DDK"
        },
        "product_version": "25.1 RTM ≤25.3 RTM"
      },
      {
        "id": "b1e2afac-2b78-315c-946f-25789c420be8",
        "product": {
          "name": "Graphics DDK"
        },
        "product_version": "23.2 RTM"
      },
      {
        "id": "f92bdf65-8e3a-3519-acfa-f9fcdfc85bb7",
        "product": {
          "name": "Graphics DDK"
        },
        "product_version": ""
      }
    ]
  }
]

Source	Link
imaginationtech	www.imaginationtech.com/gpu-driver-vulnerabilities/

01 May 2026 15:59Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.1

EPSS0.00018

SSVC