CVE-2026-22167: fallo de gravedad alta en Imagination Technologies Graphics DDK
GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 0.2%
Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages.
Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.
This attack can lead the GPU to perform write operations on restricted internal GPU buffers that can lead to a second order affect of corrupted arbitrary physical memory.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Imagination Technologies · Graphics DDKCVEs relacionadas — Imagination Technologies Graphics DDK
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-47897HIGHGPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB writeEPSS 0.6%CVE-2026-16280CRITICALGPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffsetEPSS 0.5%CVE-2025-6573CRITICALGPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/OverwriteEPSS 0.5%CVE-2025-8109HIGHGPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operationEPSS 0.5%CVE-2025-1706HIGHGPU DDK - Improper locking when accessing the pvr_exp_fence objectEPSS 0.5%CVE-2025-13952CRITICALGPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBPEPSS 0.5%