Latest vulnerabilities for "imaginationtech ddk"

Where

Sort:

Versions

25.2

Imaginationtech DdkGPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

Risk 69

Severity

7.8

First published (updated )

CVE-2026-45195

Imaginationtech DdkGPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation

Risk 56

Severity

7.7

First published (updated )

CVE-2026-21734

Imaginationtech DdkGPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable

Risk 60

Severity

8.1

First published (updated )

CVE-2026-22166

Imaginationtech DdkGPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

Risk 60

Severity

8.1

First published (updated )

CVE-2026-22165

Imaginationtech DdkGPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory

Risk 69

Severity

7.8

First published (updated )

CVE-2026-22167

Imaginationtech DdkGPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU

Risk 65

Severity

7.8

First published (updated )

CVE-2026-22163

Imaginationtech DdkGPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation

Risk 80

Severity

9.6

First published (updated )

CVE-2026-21732

Imaginationtech DdkGPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled

Risk 29

Severity

4.4

First published (updated )

CVE-2026-21736

GPU DDK libuscGPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

Risk 86

Severity

9.8

First published (updated )

CVE-2025-13952

Imaginationtech DdkGPU DDK - DevmemIntGetReservationData does not ref the PMR it returns

Risk 69

Severity

7.8

First published (updated )

CVE-2025-10865

Imaginationtech DdkGPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF

Risk 72

Severity

8.8

First published (updated )

CVE-2025-58411

Imaginationtech DdkGPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory

Risk 24

Severity

3.5

First published (updated )

CVE-2025-58409

Imaginationtech DdkGPU DDK - GPU Register value contents leaked from secure workloads to non-secure world

Risk 66

Severity

9.1

First published (updated )

CVE-2025-25176

Imaginationtech DdkGPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code

Risk 42

Severity

5.9

First published (updated )

CVE-2025-58408

Imaginationtech DdkGPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet

Risk 56

Severity

7.4

First published (updated )

CVE-2025-58407

Imaginationtech DdkGPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Risk 43

Severity

7.5

First published (updated )

CVE-2025-58410

Imaginationtech DdkGPU DDK - NULL Pointer dereference occurs in LockHandle on bridge entry when connection misused

Risk 32

Severity

5.5

First published (updated )

CVE-2025-46711

Imaginationtech DdkGPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs

Risk 34

Severity

4.3

First published (updated )

CVE-2025-46708

Imaginationtech DdkGPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it

Risk 32

Severity

5.2

First published (updated )

CVE-2025-46707

Imaginationtech DdkUse After Free

Risk 45

Severity

5.7

First published (updated )

CVE-2025-46710

Imaginationtech DdkGPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory

Risk 69

Severity

7.8

First published (updated )

CVE-2025-25179

Imaginationtech DdkGPU DDK - rgxfw_hwperf_get_packet_buffer OOB write

Risk 57

Severity

8.2

First published (updated )

CVE-2025-0467

Trending

Versions

Imaginationtech DdkGPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

Imaginationtech DdkGPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation

Imaginationtech DdkGPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable

Imaginationtech DdkGPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

Imaginationtech DdkGPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory

Don't miss critical vulnerabilities

Imaginationtech DdkGPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU

Imaginationtech DdkGPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation

Imaginationtech DdkGPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled

GPU DDK libuscGPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

Imaginationtech DdkGPU DDK - DevmemIntGetReservationData does not ref the PMR it returns

Don't miss critical vulnerabilities

Imaginationtech DdkGPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF

Imaginationtech DdkGPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory

Imaginationtech DdkGPU DDK - GPU Register value contents leaked from secure workloads to non-secure world

Imaginationtech DdkGPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code

Imaginationtech DdkGPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet

Don't miss critical vulnerabilities

Imaginationtech DdkGPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Imaginationtech DdkGPU DDK - NULL Pointer dereference occurs in LockHandle on bridge entry when connection misused

Imaginationtech DdkGPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs

Imaginationtech DdkGPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it

Imaginationtech DdkUse After Free

Don't miss critical vulnerabilities

Imaginationtech DdkGPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory

Imaginationtech DdkGPU DDK - rgxfw_hwperf_get_packet_buffer OOB write

Company

Resources

Contact