Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-21736 EUVD-2026-10330

GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled

Published Mar 9, 2026 · Updated Mar 9, 2026 · Assigned by imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory.

This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.17 RTM, 1.18 RTM, 23.2 RTM, 24.1 RTM – ≤ 25.1 RTM 25.2 RTM

Advisories 1

References