Description
Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory.
A logic error in the address translation allowed a compromised Host (Kernel) to perform arbitrary writes to firmware memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Imagination Technologies | Graphics DDK | 1.18 RTM, 23.2 RTM, 24.2 RTM, 25.1 RTM – ≤ 25.3 RTM, 26.1 RTM1 | 26.1 RTM2 |
Advisories 1
- WID-SEC-2026-3251 Android Patchday September 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 25, 2026