Description
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.
The software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Imagination Technologies | Graphics DDK | 1.18 RTM, 23.2 RTM, 24.2 RTM, 25.1 RTM – ≤ 25.3 RTM, 26.1 RTM | 26.2 RTM |
Advisories 1
- WID-SEC-2026-3251 Android Patchday September 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 25, 2026