Skip to content
OpenAdvisories
High · 7.1 CVE-2026-34194 EUVD-2026-35083GHSA-4fp7-72xg-c4hc

GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index count

Published Jun 8, 2026 · Updated Jun 8, 2026 · Assigned by imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation.

The product accidentally refers to the wrong memory due to the semantics of how math operations are implicitly scaled across buffers of different sizes.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 24.2 RTM, 25.1 RTM – ≤ 25.3 RTM, 26.1 RTM 1.18 RTM

Advisories 1

References