Imagination's Graphics DDK, a GPU driver development kit, contains an out-of-bounds read and/or write in the GPU GLES user-space shared library. A web page with unusual WebGPU content loaded into the GPU render process can trigger it and crash that process. On certain platforms where the graphics process runs with system privileges, this could enable further exploits on the device. The CVSS vector should be verified with the vendor before relying on the score.
Imagination Technologies · Graphics DDK
A kernel-mode GPU driver bug in the Imagination Graphics DDK (PowerVR) causes integer truncation when mapping GPU buffer pages in the 0 to 4 GB range. This produces mapping errors and limits driver functionality, and it appears on systems where the fix for CVE-2026-49746 is applied. The sources describe functional breakage rather than code execution or data disclosure, and the CVSS score of 9.8 in the request is not supported by the sources.
Imagination Technologies · Graphics DDK
A use-after-free flaw in the Imagination Graphics DDK lets a buffer shared by the CPU driver and GPU firmware be freed while still in use. Local software running as a non-privileged user can reallocate that memory and tamper with the driver's page address list, so the GPU can read or write physical memory it should not access. Exploitation requires local code execution; no user interaction is needed.
Imagination Technologies · Graphics DDK
The Imagination Technologies Graphics DDK, the driver development kit for PowerVR GPUs on Linux and Android, contains a stack-based buffer overflow in the kernel. The overflow occurs when resolved Linux/Android fence checkpoints are processed, because user checkpoints are excluded from the undersized stack array. A local user with low privileges can trigger it through improper GPU system calls, which can corrupt kernel memory and typically leads to a kernel crash (denial of service).
Imagination Technologies · Graphics DDK
Software running as a non-privileged user on devices with Imagination PowerVR GPUs can trigger an integer overflow in the kernel-mode driver of the Graphics DDK during memory allocation. This leads to an undersized kernel buffer, which may allow an attacker to map physical pages into a controlled GPU MMU context and read sensitive kernel data. The attacker needs local code execution with low privileges, so the flaw is not reachable remotely. The severity is disputed: 7.1 as provided, 8.8 according to VulDB.
Imagination Technologies · Graphics DDK
A web page with crafted GPU shader code can trigger an integer overflow in the libusc shader compiler of Imagination Graphics DDK. The overflow leads to a failed memory allocation and a NULL pointer dereference, which crashes the compiler process. On certain platforms where the compiler runs with system privileges, the flaw could also enable further exploits on the device.
Imagination Technologies · Graphics DDK
A race condition in the destruction path of the hardware performance counter buffer in the Imagination Graphics DDK (PowerVR GPU driver) can cause a reference counter to be decremented non-atomically. Software running as a non-privileged user on an affected device can trigger a use-after-free (CWE-416), which may allow reading and writing of kernel heap memory. Exploitation requires local code execution on the device, so an attacker needs a foothold first.
Imagination Technologies · Graphics DDK
