CVE-2026-45202: falha de média gravidade em Imagination Technologies Graphics DDK
GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.1%
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption.
Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free event.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Imagination Technologies · Graphics DDKCVEs relacionadas — Imagination Technologies Graphics DDK
No mesmo produto, das mais perigosas para as menos.
CVE-2024-47897HIGHGPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB writeEPSS 0.6%CVE-2026-16280CRITICALGPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffsetEPSS 0.5%CVE-2025-6573CRITICALGPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/OverwriteEPSS 0.5%CVE-2025-8109HIGHGPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operationEPSS 0.5%CVE-2025-1706HIGHGPU DDK - Improper locking when accessing the pvr_exp_fence objectEPSS 0.5%CVE-2025-13952CRITICALGPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBPEPSS 0.5%