Skip to content
OpenAdvisories
High · 8.8 CVE-2026-74915 EUVD-2026-113490GHSA-x7m2-2j9q-h4j6

GPU DDK - OOB write in UntwiddlePOTSquare64bpp

Published Oct 30, 2026 · Updated Nov 5, 2026 · Assigned by imaginationtech

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 – ≤ 25.3 RTM, 26.1 RTM2, 26.2 RTM 26.3 RTM

References