Skip to content
OpenAdvisories
High · 8.8 CVE-2026-34195 EUVD-2026-36605GHSA-v64m-phx9-3qqg

GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes

Published Jun 12, 2026 · Updated Jun 15, 2026 · Assigned by imaginationtech

Vendor: Imagination Technologies Product: Graphics DDK

Description

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel.

The product incorrectly indexes internal state when performing sparse allocation remapping.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 24.2 RTM, 25.1 RTM – ≤ 25.3 RTM 1.18 RTM

Advisories 1

References