CVE-2026-21734 GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An...

CVE-2026-21734

The GPU DDK is vulnerable to an out-of-bounds write within the libusc library during WebGPU shader compilation at the TreeRemove stage. This vulnerability is triggered when a web page loads unusual GPU shader code, specifically an edge case involving a very small value, which causes a segmentatio...

CVE-2026-21732

The Imagination Graphics DDK is vulnerable to an out-of-bounds write within the GPU shader compiler library (specifically in libusc during ConvertSwitchToArrayLookupBP ). This vulnerability is triggered when the compiler process handles a web page containing unusual GPU shader code, such as an ed...