imaginationtech

GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation

GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable

GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory

GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU

GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation

GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled

GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns