CVE-2026-7639

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete...

CVE-2025-25180 GPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-46708

A security vulnerability exists in the Imagination GPU Driver where software running inside a Guest VM can perform improper GPU system calls. This allows a malicious guest to prevent other guests from processing work on the GPU, potentially causing a Denial of Service for other virtualized worklo...

CVE-2025-25179

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages...

CVE-2025-25179

Software installed and run as a non-privileged user can conduct improper GPU system calls to subvert GPU hardware, enabling the ability to write to arbitrary physical memory pages . The vulnerability is identified as CVE-2025-25179 and is associated with the Graphics Ddk and GPU DDK . Technical a...

CVE-2025-1706

A security vulnerability exists in the Imagination GPU Driver (also referred to as Graphics Ddk or GPU DDK ). The flaw originates from improper locking when accessing the pvr_exp_fence object, which allows software running as a non-privileged user to conduct improper GPU system calls. This can tr...

CVE-2025-0468 GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-0478 GPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object

Software installed and run as a non-privileged user may conduct improper GPU system calls to issue reads and writes to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kerne...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that stems from improper GPU system calls that could result in reading and writing arbitrary physical memory pages...

CVE-2024-12576 GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

CVE-2024-47900 GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes

Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory...

PT-2024-32310 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially triggering use-after-free kernel...

CVE-2024-43704

This vulnerability affects Imagination Technologies components, specifically the PowerVR-GPU subcomponent within the GPU DDK (version DDK24.2 RTM1 and earlier). The root cause is an out-of-bounds write in PVRSRVAcquireProcessHandleBase within handle.c due to improper input validation, which can l...