Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-16280 EUVD-2026-48746GHSA-hw4h-9c69-9q35

GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset

Published Jul 24, 2026 · Updated Jul 27, 2026 · Assigned by imaginationtech

Description

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 – ≤ 25.3 RTM, 26.1 RTM1 26.1 RTM2

Advisories 2

References