CVE-2026-7639

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete...

CVE-2025-25180 GPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-46708

A security vulnerability exists in the Imagination GPU Driver (specifically the Graphics Ddk ) which allows software running inside a Guest VM to conduct improper GPU system calls . This flaw can result in the GPU becoming unavailable to other Guests or delaying the firmware and GPU from processi...

CVE-2025-25179

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages...

CVE-2025-25179

The Imagination GPU Driver is vulnerable in versions 24.3 and earlier . A security flaw allows software running as a non-privileged user to conduct improper GPU system calls , which can subvert the GPU hardware to perform arbitrary writes to physical memory pages . This vulnerability is specifica...

CVE-2025-1706

A security vulnerability exists in the Imagination GPU Driver (Graphics Ddk) due to improper locking when accessing the pvr_exp_fence object. This flaw allows software executed by a non-privileged user to make improper GPU system calls, which can trigger use-after-free kernel exceptions . While t...

CVE-2025-0468 GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-0478 GPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object

Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kerne...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that stems from improper GPU system calls that could result in reading and writing arbitrary physical memory pages...

CVE-2024-12576 GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

CVE-2024-47900 GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes

Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory...

PT-2024-32310 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially triggering use-after-free kernel...

CVE-2024-43704

The Imagination Technologies PowerVR-GPU component is vulnerable to a security flaw where software running as a non-privileged user can conduct improper GPU system calls. The root cause lies in the PVRSRVAcquireProcessHandleBase() function in handle.c, which can cause psProcessHandleBase reuse wh...