Skip to content
OpenAdvisories
High · 8.1 CVE-2026-22165 EUVD-2026-26662GHSA-jgfp-w594-wxgf

GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

Published May 1, 2026 · Updated May 1, 2026 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.18 RTM, 23.2 RTM, 24.1 RTM – ≤ 24.2 RTM, 25.1 RTM – ≤ 25.3 RTM 26.1 RTM

Advisories 2

References