Description Summary:
A use-after-free vulnerability in the Imagination Graphics DDK allows low-privileged local users to achieve unauthorized memory access.

Executive Summary:
A high-severity use-after-free vulnerability in Imagination Technologies Graphics DDK allows local users with low privileges to execute improper GPU system calls, potentially leading to total system compromise.

Vulnerability Details

CVE-ID: CVE-2026-7639

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: Imagination Technologies Graphics DDK: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This issue is an incomplete cleanup flaw categorized under CWE-459, triggered via improper GPU system calls requiring low privileges and local access.

Business Impact

A successful exploit permits unprivileged memory access from shader code, leading to potential data compromise, unauthorized modification, and system instability. With a CVSS score of 7.8, this high-severity flaw threatens environments where untrusted local code execution is possible, such as multi-tenant or shared workstations.

Remediation Plan

Immediate Action: Update Imagination Technologies Graphics DDK to version 26.1 RTM2 or later.

Proactive Monitoring: Monitor system and GPU driver logs for anomalous error paths or repeated failure codes within the MMU mapping logic.

Compensating Controls: Restrict local user access and prevent the execution of untrusted shader code or unverified binaries on vulnerable systems.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit exists in our tracked sources).

Analyst Notes: As of Jul 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Local attackers require existing low-level access to execute the malicious shader code.

Analyst Recommendation

Administrators must prioritize updating the Graphics DDK to the fixed release as soon as possible. Because local execution vectors can be leveraged in chained attacks, applying the vendor patch remains the most critical step to neutralize the risk of unauthorized physical memory access.

Description Summary:
A vulnerability in the Imagination Technologies Graphics DDK allows non-privileged users to perform improper GPU system calls, leading to kernel memory out of bounds read and potential use after free.

Executive Summary:
A high-severity memory corruption vulnerability in Imagination Technologies Graphics DDK allows a local authenticated user to gain unauthorized kernel memory access or cause system crashes.

Vulnerability Details

CVE-ID: CVE-2026-49746

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: The vulnerability stems from improper validation of array indices during GPU system calls, specifically categorized as CWE-823: Use of Out-of-range Pointer Offset. A local user with low privileges can exploit this flaw to trigger out of bounds kernel memory reads or use after free conditions.

Business Impact

The ability for a non-privileged user to access kernel memory poses a significant risk to system integrity and confidentiality. While the CVSS score of 7.1 indicates a high risk, the potential for kernel-level memory corruption could lead to privilege escalation or system instability, directly impacting operational uptime and the security of data processed within the kernel environment.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later to apply the necessary index validation fixes.

Proactive Monitoring: Monitor system logs for unusual GPU driver behavior or crash reports that may indicate attempts to exploit memory vulnerabilities.

Compensating Controls: Restrict access to the graphics subsystem for unauthorized users where possible, and ensure that kernel-level protections are active to limit the impact of potential memory corruption.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 7, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its location in the kernel-mode driver code, which typically provides a high-value target for privilege escalation if a reliable exploit is developed.

Analyst Recommendation

Given the severity of a kernel-mode vulnerability, organizations should prioritize updating the Graphics DDK across all affected systems. Failure to address this flaw could allow local attackers to bypass security boundaries, making the immediate application of the vendor-provided patch critical to maintaining a secure computing environment.

Description Summary:
A vulnerability in the Imagination Graphics DDK allows a guest virtual machine to trigger out-of-range memory writes via improper GPU firmware commands.

Executive Summary:
A high-severity out-of-range pointer vulnerability in the Imagination Graphics DDK could allow a guest VM to perform unauthorized memory writes outside its permitted address space.

Vulnerability Details

CVE-ID: CVE-2026-49745

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This is an out-of-range pointer offset vulnerability (CWE-823) where improper commands sent from a Guest VM to the GPU firmware result in memory corruption. The flaw allows an attacker within a virtualized guest to bypass memory isolation constraints.

Business Impact

With a CVSS score of 7.8, this vulnerability poses a significant risk to the integrity and confidentiality of virtualized systems. An attacker may be able to manipulate data in memory outside of the guest, leading to potential privilege escalation or the theft of sensitive data from the host or other guests.

Remediation Plan

Immediate Action: Update the Graphics DDK to version 26.1 RTM2 or later to address the memory safety issue.

Proactive Monitoring: Review audit logs for suspicious GPU command activity and monitor for memory access errors or unexpected system behavior on hosts supporting guest GPU pass-through.

Compensating Controls: If patching is not immediately feasible, restrict the use of GPU pass-through features for untrusted or public-facing virtual machines.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires specific access to a guest environment, the impact of breaking out of these bounds is severe.

Analyst Recommendation

The risk of memory corruption in a virtualized environment necessitates prompt remediation. Administrators should verify their current DDK versions and apply the recommended updates to prevent potential unauthorized access to protected memory regions.

Description Summary:
An out-of-range pointer offset vulnerability in the Imagination Graphics DDK allows a guest virtual machine to trigger unauthorized writes outside of its allocated GPU memory.

Executive Summary:
A high-severity memory safety vulnerability in the Imagination Graphics DDK allows a malicious guest VM to write data outside of its virtualized memory boundaries.

Vulnerability Details

CVE-ID: CVE-2026-49744

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM

Vulnerability: This vulnerability (CWE-823) involves the use of an out-of-range pointer offset when processing commands sent from a Guest VM to the GPU firmware. An attacker with access to a Guest VM can trigger memory writes outside the intended memory region, potentially affecting the host or other virtual machines.

Business Impact

The CVSS score of 7.8 indicates a critical threat to virtualized environments. Exploitation could lead to cross-VM data leakage or host-level compromise, undermining the security guarantees of the virtualization platform and exposing sensitive information to unauthorized actors.

Remediation Plan

Immediate Action: Upgrade to the Graphics DDK version 26.1 RTM1 or later to resolve the pointer offset error.

Proactive Monitoring: Monitor hypervisor and GPU firmware logs for irregular command sequences or unexpected memory access violations occurring within guest environments.

Compensating Controls: Isolate sensitive virtual machines that utilize GPU acceleration until the patch can be applied, as this reduces the attack surface for potential inter-VM exploitation.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of this flaw makes it a high-value target for attackers looking to break out of virtualized environments.

Analyst Recommendation

This vulnerability represents a serious threat to multi-tenant or virtualized infrastructure. Security teams must ensure that all affected virtualization hosts and guest drivers are updated immediately to prevent potential cross-boundary memory corruption.

Description Summary:
A Use After Free vulnerability in the Imagination Graphics DDK allows a local authenticated user to manipulate kernel synchronization objects via improper GPU system calls.

Executive Summary:
A high-severity Use After Free vulnerability in the Imagination Graphics DDK could allow an authenticated local attacker to achieve kernel-level memory corruption.

Vulnerability Details

CVE-ID: CVE-2026-49743

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This is a Use After Free (CWE-416) vulnerability occurring within the kernel due to improper handling of GPU system calls. An attacker with local access and low privileges can influence the lifetime of synchronization objects, resulting in read or write operations on freed memory.

Business Impact

The CVSS score of 7.8 reflects a high-severity risk that could lead to full system compromise. Successful exploitation allows an attacker to gain elevated privileges or cause a system crash, resulting in significant data exposure and potential denial of service for mission-critical graphics workloads.

Remediation Plan

Immediate Action: Update the Imagination Graphics DDK to the fixed versions, which include 1.18 RTM2, 23.2 RTM2, or 26.1 RTM2, depending on your deployment branch.

Proactive Monitoring: Monitor system logs for unusual kernel-level activity or repeated application crashes that may indicate exploitation attempts targeting GPU drivers.

Compensating Controls: Limit access to the affected system to trusted users only, as the attack requires local execution capabilities to initiate the malicious GPU system calls.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it involves kernel-level memory management, which is a common target for privilege escalation attacks.

Analyst Recommendation

Given the potential for kernel-level memory corruption and privilege escalation, this vulnerability presents a significant security risk. System administrators should prioritize the deployment of the vendor-provided patches to the Graphics DDK to ensure kernel stability and prevent unauthorized access.

Description Summary:
A Time-of-Check Time-of-Use race condition in the Imagination Graphics DDK allows a local authenticated attacker to achieve high privileges.

Executive Summary:
A time-of-check time-of-use race condition vulnerability in Imagination Technologies Graphics DDK allows a low-privileged local user to compromise host kernel memory and achieve total system impact.

Vulnerability Details

CVE-ID: CVE-2026-45203

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This is a Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability (CWE-367) occurring within the GPU firmware interaction handling. An authenticated local attacker requires low privileges and no user interaction to trigger the flaw by modifying values in memory after firmware validation but before use.

Business Impact

A successful exploit allows a malicious driver running inside a Host VM to post improper commands to the GPU firmware, resulting in out-of-bounds memory writes in the host kernel. This can lead to total system compromise, data confidentiality breaches, integrity loss, and severe downtime. The CVSS score of 7.8 reflects a high severity level due to the complete compromise of the host kernel scope.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later where the TOCTOU race condition is resolved.

Proactive Monitoring: Monitor host system logs for unexpected kernel crashes, anomalous driver behavior, or unauthorized resource access attempts within virtual machines.

Compensating Controls: Restrict local user access and virtual machine privileges to minimize the pool of actors capable of executing low-privileged kernel interactions.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of Jul 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The local attack vector requires prior execution access inside a Host VM, but the severity of kernel memory corruption warrants immediate patching.

Analyst Recommendation

Security teams must prioritize updating the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later. Given the potential for total host kernel compromise, applying the vendor patch immediately is critical to eliminate local privilege escalation and memory corruption risks.

Description Summary:
A trust boundary violation in the Imagination Technologies Graphics DDK allows a local attacker to corrupt GPU firmware data by manipulating pointers stored in non-secure memory.

Executive Summary:
A high-severity trust boundary vulnerability in Imagination Technologies Graphics DDK could allow an attacker with local kernel access to compromise GPU firmware integrity.

Vulnerability Details

CVE-ID: CVE-2026-45198

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.17 RTM2, 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This flaw involves an untrusted pointer dereference and a trust boundary violation where the GPU firmware consumes pointers from the Rich Execution Environment without validation. An attacker with privileged access to the local kernel can modify these pointers to corrupt internal GPU data.

Business Impact

The vulnerability carries a CVSS score of 7.8, indicating a high level of risk to system integrity and confidentiality. Successful exploitation allows a local attacker to bypass security boundaries, potentially leading to unauthorized data access, privilege escalation, or permanent denial of service through firmware corruption. This poses significant risk to environments relying on Trusted Execution Environments for secure processing.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later to apply the necessary pointer validation fixes.

Proactive Monitoring: Monitor system logs for unusual kernel activity or unauthorized attempts to access GPU memory regions.

Compensating Controls: Ensure that access to the Rich Execution Environment kernel is strictly restricted to authorized administrators and processes to prevent the initial exploitation vector.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 7, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its impact on firmware security, but it requires the attacker to already possess significant control over the host kernel to trigger the corruption.

Analyst Recommendation

Given the potential for complete compromise of the GPU firmware and the bypass of hardware-backed security boundaries, this vulnerability should be addressed as a high priority. Organizations utilizing affected Imagination Technologies drivers must schedule an update to the patched version, 26.1 RTM2, during the next available maintenance window to neutralize the risk of local kernel-based attacks.

Description Summary:
A privilege escalation vulnerability in Imagination Graphics DDK allows a low-privileged local user inside a Host VM to trigger improper GPU register access.

Executive Summary:
An improper permission handling vulnerability in Imagination Technologies Graphics DDK allows local users to achieve privilege escalation via the GPU firmware.

Vulnerability Details

CVE-ID: CVE-2026-45196

Affected Software: Imagination Graphics DDK

Affected Versions: Imagination Technologies Graphics DDK: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This issue is an improper permission handling vulnerability, classified under CWE-280, where kernel software in a Host VM posts improper commands to the GPU firmware. The CVSS vector indicates a local attack vector requiring low privileges and no user interaction.

Business Impact

A successful exploit allows a low-privileged local user to escalate privileges and obtain complete control over the affected system. This introduces significant risks of unauthorized data access, system manipulation, and service disruption. The high CVSS score of 7.8 reflects the severity of potential total compromise for virtualized environments utilizing vulnerable driver versions.

Remediation Plan

Immediate Action: Update Imagination Technologies Graphics DDK to version 26.1 RTM2 or later to resolve the underlying permission handling flaw.

Proactive Monitoring: Monitor system logs for unusual local execution patterns or unauthorized attempts to access GPU registers within virtual machines.

Compensating Controls: Restrict local user access levels within virtual machine environments and enforce the principle of least privilege to minimize exposure.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit or weaponized module currently exists in the available data).

Analyst Notes: As of Jul 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. CISA SSVC assessment classifies exploitation as none, meaning the risk is primarily theoretical until an exploit materializes.

Analyst Recommendation

Given the high severity score and the potential for full system compromise, administrators should treat this vulnerability with urgency. Apply the vendor-provided update to version 26.1 RTM2 or later across all affected virtualized environments as soon as possible to eliminate the privilege escalation vector.

Description Summary:
A critical memory vulnerability in the Imagination Graphics DDK allows improper GPU commands to trigger out-of-bounds memory access.

Executive Summary:
A high-severity vulnerability in the Imagination Graphics DDK enables a guest VM to perform unauthorized memory reads or writes on the host kernel.

Vulnerability Details

CVE-ID: CVE-2026-45195

Affected Software: Imagination Graphics DDK

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists in the interface between the virtual machine and GPU firmware, where improper command validation allows a malicious actor to perform out-of-bounds memory operations. This represents a significant security boundary violation between the guest VM and the host kernel.

Business Impact

The CVSS score of 7.8 underscores the severity of this vulnerability, as it allows for potential guest-to-host breakout. Successful exploitation could lead to full system compromise, data exfiltration, or complete loss of control over the affected virtualization host, posing a severe threat to multi-tenant environments.

Remediation Plan

Immediate Action: Identify all systems utilizing Imagination Graphics DDK and apply the latest vendor-provided security patches to the GPU firmware and driver stack.

Proactive Monitoring: Monitor virtual machine hypervisor logs for unexpected GPU firmware interactions or unauthorized attempts to access restricted memory regions.

Compensating Controls: Where patching is delayed, limit the exposure of sensitive virtualized workloads by isolating systems that rely on affected GPU drivers until the remediation is complete.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Due to the nature of this vulnerability involving kernel-level memory access, immediate patching is essential to prevent VM escape scenarios. System administrators should prioritize this update in all virtualized environments utilizing Imagination graphics hardware.

Description Summary:
A vulnerability in the Imagination Graphics DDK allows a local, low-privileged user to cause out-of-bounds kernel memory reads or writes via GPU API calls.

Executive Summary:
An out-of-bounds write vulnerability in Imagination Graphics DDK allows local users to achieve high system compromise through malicious GPU API calls.

Vulnerability Details

CVE-ID: CVE-2026-41154

Affected Software: Imagination Graphics DDK

Affected Versions: Imagination Technologies Graphics DDK: 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This issue is an out-of-bounds write (CWE-787) caused by incorrect buffer indexing when indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation. The attacker requires local access and low privileges with no user interaction.

Business Impact

A successful exploit of this vulnerability can lead to a total compromise of confidentiality, integrity, and availability of the affected system. Because the flaw permits kernel memory reads and writes, a local attacker can potentially escalate privileges, corrupt kernel memory, or cause system crashes. The CVSS score of 7.8 establishes this as a high-severity issue requiring prompt attention to secure local environments.

Remediation Plan

Immediate Action: Update Imagination Technologies Graphics DDK to the unaffected fixed versions, specifically 1.18 RTM2, 23.2 RTM2, 26.1 RTM2, or later.

Proactive Monitoring: Monitor systems for anomalous GPU driver behavior, unauthorized process execution, or unexpected kernel crashes.

Compensating Controls: Restrict local user access and limit the execution of untrusted applications on systems utilizing the vulnerable graphics driver.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents a significant local escalation risk due to the potential for kernel-level memory manipulation.

Analyst Recommendation

Administrators must treat CVE-2026-41154 with high urgency despite its local vector requirement, as kernel memory corruption frequently leads to full system takeover. Apply the vendor-supplied driver updates immediately to eliminate the out-of-bounds access vector in the sparse memory implementation.

Description Summary:
A use-after-free vulnerability in Imagination Graphics DDK allows a local low-privileged user to conduct improper GPU system calls leading to arbitrary read and write access.

Executive Summary:
An integer overflow and use-after-free vulnerability in the Imagination Technologies Graphics DDK allows local, low-privileged users to achieve high confidentiality, integrity, and availability impact.

Vulnerability Details

CVE-ID: CVE-2026-34196

Affected Software: Imagination Graphics DDK

Affected Versions: Imagination Technologies Graphics DDK: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This vulnerability is a use-after-free flaw (CWE-416) triggered via improper GPU system calls by a locally authenticated user with low privileges.

Business Impact

A successful exploit of this vulnerability could allow a malicious local user to gain complete control over the affected system, resulting in total data compromise, system instability, and unauthorized access. With a CVSS score of 7.8 (High), the risk profile is elevated because local attackers can leverage the flaw to escalate privileges or corrupt memory.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later.

Proactive Monitoring: Monitor system logs for unusual local process activity, GPU driver crashes, or unauthorized attempts to interact with graphics device nodes.

Compensating Controls: Restrict local user access and interactive logon rights to trusted personnel only, reducing the attack surface for locally executed code.

Exploitation Status

Public Exploit Available: No (false)

Analyst Notes: As of Jul 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires local access and low privileges, making strict host-level access controls an effective mitigation layer.

Analyst Recommendation

Given the high CVSS severity and the potential for total system compromise, administrators should prioritize updating the Imagination Graphics DDK across all affected systems. Applying the vendor-provided patch is critical to neutralizing the use-after-free vector and protecting host integrity.

Description Summary:
Software running as a non-privileged user can trigger an out-of-bounds write in the kernel via intentional GPU sparse memory API calls.

Executive Summary:
A high-severity kernel-level vulnerability exists in the GPU driver, allowing a local non-privileged user to achieve arbitrary code execution with kernel-level privileges.

Vulnerability Details

CVE-ID: CVE-2026-34195

Affected Software: Imagination Technologies GPU Driver

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability stems from incorrect indexing of internal state when performing sparse allocation remapping. A local attacker can intentionally trigger these API calls to cause an out-of-bounds write, granting them control over the kernel's execution flow.

Business Impact

The CVSS score of 8.8 reflects the high risk posed by kernel-level exploits. Successful exploitation allows a local user to elevate their privileges to the highest level, potentially resulting in complete system takeover, persistence, and the bypass of all OS-level security controls.

Remediation Plan

Immediate Action: Apply the latest GPU driver updates provided by the hardware vendor or system manufacturer.

Proactive Monitoring: Monitor for unexpected system crashes or unusual kernel-related errors, which may indicate attempted exploitation.

Compensating Controls: Restrict access to GPU-accelerated applications to trusted users only and enforce the principle of least privilege for all local accounts.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no evidence of proof of exploitation at the moment. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Kernel vulnerabilities of this nature are extremely dangerous. Administrators must prioritize updating GPU drivers on all affected systems to prevent local attackers from gaining full administrative control over the underlying host.

Description Summary:
A memory buffer vulnerability in Imagination Technologies Graphics DDK allows a local authenticated user to perform unauthorized GPU writes and corrupt kernel memory.

Executive Summary:
An improper memory buffer restriction vulnerability in the Imagination Technologies Graphics DDK allows local non-privileged users to corrupt kernel memory and alter system behavior, presenting a severe integrity and confidentiality risk.

Vulnerability Details

CVE-ID: CVE-2026-22167

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: Imagination Technologies Graphics DDK: 1.18 RTM, 23.2 RTM, 24.1 RTM through 24.2 RTM, 25.1 RTM through 25.3 RTM

Vulnerability: This is an improper restriction of operations within the bounds of a memory buffer, classified under CWE-119, triggered via improper GPU system calls requiring low local privileges and no user interaction.

Business Impact

Successful exploitation of this flaw can lead to total compromise of system confidentiality, integrity, and availability as attackers corrupt kernel memory and manipulate platform behavior. With a CVSS score of 7.8, this high-severity vulnerability poses significant risks to enterprise systems relying on affected graphics drivers, potentially allowing local container escapes or root privilege escalation.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM or later where the vulnerability is resolved.

Proactive Monitoring: Monitor local system logs for anomalous GPU driver behavior, unauthorized process executions, or unexpected kernel panics.

Compensating Controls: Restrict local shell access and apply rigorous principle of least privilege principles to limit which users can execute unprivileged software on the host.

Exploitation Status

Public Exploit Available: False / unknown

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw presents inherent risk due to the potential for second-order arbitrary physical memory corruption via local system calls.

Analyst Recommendation

Security teams must treat this high-severity flaw with urgency despite the requirement for local execution. Administrators should prioritize upgrading affected Imagination Technologies Graphics DDK installations to version 26.1 RTM immediately to eliminate the underlying memory corruption vector.

Description Summary:
A use-after-free vulnerability in Imagination Technologies Graphics DDK allows an authenticated user to trigger a memory corruption crash via malicious WebGPU content.

Executive Summary:
A use-after-free vulnerability in the Imagination Technologies Graphics DDK affects multiple graphics driver versions and creates a severe risk of integrity and availability compromise.

Vulnerability Details

CVE-ID: CVE-2026-22166

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM, 23.2 RTM, 24.1 RTM through 24.2 RTM, 25.1 RTM through 25.3 RTM

Vulnerability: This vulnerability is a Use After Free (CWE-416) within the GPU GLES user-space shared library, triggered by loading unusual WebGPU content via a low-privileged user interaction.

Business Impact

A successful exploit can result in complete loss of data integrity and system availability for the affected host. When the graphics workload executes with system privileges, this flaw could facilitate privilege escalation and subsequent system compromise. With a CVSS score of 8.1, the high severity reflects the potential for severe operational disruption and unauthorized system control.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM or later where the vulnerability is resolved.

Proactive Monitoring: Monitor system logs for unexpected graphics driver crashes, rendering process restarts, or anomalous user-space errors.

Compensating Controls: Restrict untrusted web browsing and rendering content on critical systems where immediate driver updates are not feasible.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. CISA SSVC assessment indicates that exploitation is currently none.

Analyst Recommendation

Given the high CVSS score and the potential for severe system impact when combined with elevated driver privileges, organizations must prioritize updating the affected graphics drivers. Apply the vendor security updates immediately to eliminate the use-after-free risk and protect endpoints from potential code execution scenarios.

Description Summary:
A use-after-free (UAF) vulnerability in the GPU GLES user-space shared library can be triggered by malicious WebGPU content.

Executive Summary:
A use-after-free vulnerability in the GPU GLES shared library could allow an attacker to trigger crashes or potentially execute code via malicious web content.

Vulnerability Details

CVE-ID: CVE-2026-22165

Affected Software: GPU GLES shared library

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability is a write use-after-free (UAF) crash condition occurring within the GPU GLES user-space shared library. It is triggered when processing specifically crafted WebGPU content, which may lead to memory corruption within the rendering process.

Business Impact

A CVSS score of 8.1 highlights the critical nature of this flaw, as it can be weaponized through web browsers to achieve remote code execution. This poses a severe risk to end-user workstations, potentially leading to unauthorized data exfiltration or system takeover.

Remediation Plan

Immediate Action: Ensure that all web browsers and associated GPU drivers are updated to the latest versions provided by the vendor.

Proactive Monitoring: Utilize endpoint detection and response (EDR) solutions to monitor for suspicious process crashes or anomalous memory access patterns in web browser renderers.

Compensating Controls: Use browser-based security features or extensions that restrict execution of WebGPU content from untrusted domains.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should prioritize the update of browser environments and graphics drivers to mitigate this high-severity UAF vulnerability. Immediate patching is recommended to prevent potential exploitation via malicious web-based content.

Description Summary:
A vulnerability in the Imagination Graphics DDK allows for an out-of-bounds write crash via maliciously crafted GPU shader code.

Executive Summary:
The Imagination Graphics DDK is vulnerable to an out-of-bounds write flaw, which could be leveraged to crash system processes or potentially facilitate code execution.

Vulnerability Details

CVE-ID: CVE-2026-21734

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists in the GPU shader compiler library, where loading a web page with specially crafted shader code triggers an out-of-bounds write during the compilation process.

Business Impact

This vulnerability presents a high risk as it can be triggered through standard web browsing, potentially leading to denial-of-service or memory corruption on affected hardware. With a CVSS score of 7.7, the exploitability via web content makes this a significant risk for endpoints and workstations within the corporate network.

Remediation Plan

Immediate Action: Update the Graphics DDK drivers and relevant software packages to the latest version provided by the manufacturer.

Proactive Monitoring: Monitor endpoint crash logs and system stability reports for recurring GPU driver crashes that may indicate exploitation attempts.

Compensating Controls: Ensure that web browsers are kept up-to-date and utilize hardware-accelerated security features, or disable GPU acceleration in web browsers if a patch is not immediately available.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Vulnerabilities involving GPU shader compilers are dangerous because they can be triggered remotely by visiting a malicious website. Organizations should prioritize updating all graphics drivers and browser software to mitigate the risk of memory-based attacks on their user base.

Description Summary:
A vulnerability in the Imagination Technologies Graphics DDK allows a local, non-privileged user to gain unauthorized write access to read-only user-mode memory and files via improper GPU system calls.

Executive Summary:
A critical local privilege escalation flaw in Imagination Technologies Graphics DDK allows non-privileged users to bypass memory protections and gain unauthorized write access.

Vulnerability Details

CVE-ID: CVE-2026-21733

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM, 23.2 RTM, 24.1 RTM through 24.2 RTM, 25.1 RTM through 25.3 RTM

Vulnerability: This vulnerability, categorized under CWE-280, stems from the improper handling of GPU memory reservation protections. A local attacker with low privileges can exploit these flawed system calls to overwrite protected, read-only memory and files.

Business Impact

The ability for a non-privileged user to gain write access to restricted memory and files poses a significant threat to system integrity and confidentiality. Successful exploitation could allow an attacker to modify system processes, escalate privileges, or corrupt critical data. Given the CVSS score of 7.3, this high-severity vulnerability represents a substantial risk to any environment relying on affected GPU hardware.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM or later to resolve the underlying memory reservation flaw.

Proactive Monitoring: Audit system logs for unusual GPU-related system calls or unauthorized attempts to access protected memory regions by standard user accounts.

Compensating Controls: Restrict local access to systems using the vulnerable DDK and enforce the principle of least privilege for all local user accounts to limit the potential impact of a compromise.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is locally exploitable, meaning an attacker must already have a foothold on the system to trigger the vulnerability.

Analyst Recommendation

Organizations utilizing the affected Imagination Technologies Graphics DDK should prioritize upgrading to version 26.1 RTM immediately. Because this vulnerability facilitates privilege escalation and unauthorized file modification, patching is essential to maintain the security posture of affected workstations and servers. Monitor vendor channels for any additional guidance regarding driver deployment.

Description Summary:
An integer overflow in the Graphics DDK allows unprivileged users to cause memory corruption or information disclosure via incorrect GPU MMU mappings for physical memory regions exceeding 4 GB.

Executive Summary:
A critical integer overflow vulnerability in Imagination Technologies Graphics DDK enables unauthenticated attackers to perform unauthorized memory access and potential code execution.

Vulnerability Details

CVE-ID: CVE-2026-16280

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: The vulnerability is an integer overflow (CWE-190) occurring during the calculation of physical offsets for sparse Physical Memory Regions (PMRs). This flaw allows an unauthenticated, non-privileged user to trigger a 32-bit truncation, leading to incorrect GPU Memory Management Unit (MMU) mappings and resulting in unintended physical memory access.

Business Impact

The vulnerability carries a CVSS score of 9.8, indicating a critical severity due to its potential for full system compromise. Successful exploitation allows for memory corruption or information disclosure, which could lead to unauthorized data access, system instability, or the execution of arbitrary code with the privileges of the GPU driver.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later, as these versions contain the necessary fix for the integer overflow.

Proactive Monitoring: Monitor system logs for unusual GPU driver crashes or kernel-level errors that may indicate attempts to exploit memory management functions.

Compensating Controls: Ensure that systems utilizing affected drivers are isolated from untrusted networks, and employ hardware-level security features like IOMMU where possible to restrict memory access.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential to bypass memory protections at the hardware interface level.

Analyst Recommendation

Given the critical CVSS severity and the low complexity of the attack vector, this vulnerability represents a significant risk to system integrity. Administrators should prioritize patching the Graphics DDK across all deployed environments to prevent potential memory exploitation.

Description Summary:
A vulnerability in Imagination Technologies Graphics DDK allows a non-privileged user to perform ptrace system calls, enabling unauthorized writes to read-only GPU memory.

Executive Summary:
The Imagination Technologies Graphics DDK is vulnerable to a privilege escalation flaw that allows non-privileged users to modify protected GPU memory, posing a significant risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2025-8109

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.13 RTM through 24.2 RTM2

Vulnerability: This issue is classified as an improper handling of insufficient permissions (CWE-280), where a low-privileged authenticated user can leverage ptrace system calls to bypass memory protections and write to read-only GPU memory regions.

Business Impact

The ability for a non-privileged user to write to read-only GPU memory can lead to full system compromise, unauthorized data modification, or denial of service. Given the CVSS score of 8.8, this vulnerability represents a high risk to the confidentiality, integrity, and availability of affected systems. Organizations relying on hardware using these drivers may face severe operational impacts if the vulnerability is weaponized by local malicious actors.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 24.3 RTM or later to incorporate the necessary security fixes.

Proactive Monitoring: Monitor system logs for unusual ptrace activity or unauthorized attempts to access protected memory regions by non-privileged accounts.

Compensating Controls: Restrict the ability of non-privileged users to execute ptrace system calls on sensitive hardware interfaces using kernel-level security policies or system hardening tools.

Exploitation Status

Public Exploit Available: No (exploit_available unknown)

Analyst Notes: As of August 5, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's requirement for local access and specific system call utilization suggests that while dangerous, it requires a degree of local system interaction.

Analyst Recommendation

This vulnerability presents a high-severity risk due to the potential for privilege escalation and unauthorized memory manipulation. Administrators should prioritize identifying all systems utilizing the affected Imagination Technologies Graphics DDK and transition to version 24.3 RTM as soon as possible to mitigate the risk of local exploitation.

Description Summary:
A use-after-free vulnerability in the Imagination Technologies Graphics DDK allows a local, non-privileged user to trigger memory corruption via improper GPU system calls.

Executive Summary:
A high-severity use-after-free vulnerability in the Imagination Technologies Graphics DDK enables local attackers to achieve potential code execution and system compromise.

Vulnerability Details

CVE-ID: CVE-2025-58411

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.15 RTM, 1.17 RTM, 1.18 RTM, 23.2 RTM through 25.2 RTM

Vulnerability: This is a use-after-free vulnerability occurring due to improper resource management and reference counting in GPU system calls. An attacker with local, non-privileged access can exploit this flaw to trigger memory corruption, potentially leading to privilege escalation or system instability.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting its potential for total system impact. Successful exploitation could allow a local user to bypass security controls, gain elevated privileges, or cause a denial of service, significantly compromising the integrity and availability of the affected host environment.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 25.3 RTM or later to incorporate the necessary resource management fixes.

Proactive Monitoring: Monitor system logs for unusual GPU driver behavior or unexpected process crashes that may indicate exploitation attempts.

Compensating Controls: Restrict local user access to the system and ensure that only authorized personnel have the ability to execute applications that interface directly with the GPU driver.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of January 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires local access, which limits the attack surface, but the high severity classification highlights the danger if a malicious actor gains a foothold on the target system.

Analyst Recommendation

Given the potential for high-impact system compromise, organizations utilizing affected Imagination Technologies graphics components should prioritize updating their DDK drivers to the specified fixed version. System administrators must ensure that all workstations and servers using the vulnerable driver are remediated promptly to eliminate the possibility of local privilege escalation.

Description Summary:
A vulnerability in the Imagination Technologies Graphics DDK allows non-privileged users to gain write access to read-only memory buffers via improper GPU system calls.

Executive Summary:
A vulnerability in the Imagination Technologies Graphics DDK enables unauthorized memory modification, potentially leading to privilege escalation or system instability.

Vulnerability Details

CVE-ID: CVE-2025-58410

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 23.3 RTM through 25.1 RTM2, 25.2 RTM

Vulnerability: This flaw involves improper handling of memory protections for buffer resources, allowing a non-privileged user to conduct GPU system calls that overwrite read-only memory. The vulnerability requires no prior authentication to trigger.

Business Impact

The ability to write to read-only memory buffers poses a significant security risk, as it may allow attackers to bypass security boundaries, inject malicious code, or corrupt critical system processes. With a CVSS score of 7.5, this issue represents a high risk to system integrity and confidentiality, potentially enabling an attacker to gain elevated privileges or compromise the underlying operating system.

Remediation Plan

Immediate Action: Update the affected Graphics DDK to the verified fixed versions, which include 1.15 RTM, 1.17 RTM, 1.18 RTM, or 23.2 RTM.

Proactive Monitoring: Monitor system logs for unusual GPU-related error messages or unexpected system behavior that might indicate attempts to manipulate memory buffers.

Compensating Controls: Ensure that systems are running with the principle of least privilege, limiting the ability of non-privileged users to interact with sensitive hardware interfaces where possible.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of November 19, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its direct impact on memory protection mechanisms, which are foundational to system security.

Analyst Recommendation

Given the potential for unauthorized memory access and the high CVSS severity rating, organizations utilizing Imagination Technologies Graphics DDK should prioritize the application of the vendor-provided updates. Failure to patch these systems could expose local environments to unauthorized privilege escalation. Verify your current driver version against the affected list and schedule maintenance to apply the necessary fixes immediately.

Description Summary:
A Time-of-check Time-of-use (TOCTOU) race condition in Imagination Technologies Graphics DDK allows a guest VM to escape its boundaries and access unauthorized memory.

Executive Summary:
A critical vulnerability in Imagination Technologies Graphics DDK allows guest virtual machines to escape isolation and perform unauthorized memory operations, posing a significant risk to host integrity.

Vulnerability Details

CVE-ID: CVE-2025-58407

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 25.2 RTM1

Vulnerability: The flaw is a Time-of-check Time-of-use (TOCTOU) race condition (CWE-367) that occurs when malicious kernel or driver software within a guest VM sends improper commands to the GPU firmware. This allows for reading or writing data outside of allotted memory, resulting in a virtual machine escape.

Business Impact

The ability for a guest virtual machine to escape its containment and access host memory represents a severe security breach that undermines the foundation of multi-tenant cloud or virtualization environments. With a CVSS score of 7.4, this high-severity vulnerability could lead to total data compromise, cross-tenant data leakage, or the execution of arbitrary code on the underlying host system, causing significant reputational and operational damage.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 25.1 RTM2 or later to apply the necessary security fixes for the TOCTOU race condition.

Proactive Monitoring: Monitor virtual machine performance and system logs for unexpected GPU driver errors, driver crashes, or unusual memory access patterns that may indicate exploitation attempts.

Compensating Controls: Implement strict hardware-level isolation policies and ensure that virtual machines are configured with the minimum required access to physical GPU resources to limit the attack surface.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit or weaponized PoC available in the provided data.

Analyst Notes: As of November 19, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires specific conditions to trigger the race condition, the potential for VM escape makes this a high-priority item for any infrastructure utilizing these drivers.

Analyst Recommendation

The severity of a virtual machine escape vulnerability necessitates immediate attention for any environment running affected Graphics DDK versions. Administrators should prioritize patching the driver stack to the fixed version 25.1 RTM2 to eliminate the risk of unauthorized host memory access. Failure to address this flaw could lead to a total compromise of the virtualization host, making rapid deployment of the vendor-supplied update essential for maintaining system integrity.

Description Summary:
A vulnerability in Imagination Technologies Graphics DDK allows a local, non-privileged user to perform improper GPU system calls, leading to arbitrary physical memory writes and kernel corruption.

Executive Summary:
A high-severity memory corruption vulnerability in Imagination Technologies Graphics DDK allows local attackers to elevate privileges and compromise kernel integrity.

Vulnerability Details

CVE-ID: CVE-2025-25180

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.15 RTM, 1.17 RTM, 1.18 RTM, 23.2 RTM through 24.3 RTM1

Vulnerability: This flaw involves the improper handling of GPU system calls (CWE-823), which allows a local attacker with standard user privileges to subvert hardware operations. By triggering these calls, an attacker can write to arbitrary physical memory pages, including those reserved for the kernel and other system drivers.

Business Impact

The ability to write to arbitrary physical memory pages provides an attacker with a direct path to privilege escalation and full system compromise. Given the CVSS score of 7.8, this vulnerability poses a significant threat to data confidentiality, integrity, and system availability. Successful exploitation could lead to unauthorized access to sensitive data or the total disruption of platform stability by corrupting critical kernel-level processes.

Remediation Plan

Immediate Action: Organizations must update the Imagination Technologies Graphics DDK to version 25.1 RTM1 or later to remediate the underlying memory handling flaw.

Proactive Monitoring: Security teams should monitor system logs for unusual GPU driver activity or unexpected kernel panics that may indicate failed or successful exploitation attempts.

Compensating Controls: Ensure that systems are running with the principle of least privilege, limiting the number of users who can interact directly with graphics hardware interfaces.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 15, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for kernel-level memory manipulation, but it requires local access to the target system.

Analyst Recommendation

This vulnerability represents a significant risk to systems utilizing affected Imagination Technologies graphics drivers. Because the flaw allows for arbitrary memory writes that can bypass standard security boundaries, administrators should prioritize patching as part of their regular update cycle. Failure to update to the fixed version leaves the kernel susceptible to local privilege escalation and persistent system instability.

Description Summary:
A use after free vulnerability in Imagination Technologies Graphics DDK allows a local, authenticated user to trigger GPU memory mismanagement via improper system calls.

Executive Summary:
A use after free vulnerability in Imagination Technologies Graphics DDK creates a risk of local privilege escalation or system instability.

Vulnerability Details

CVE-ID: CVE-2025-10865

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.15 RTM, 1.17 RTM, 1.18 RTM, 23.2 RTM through 25.2 RTM

Vulnerability: This is a use after free vulnerability (CWE-416) resulting from improper reference counting during GPU system calls, which can be triggered by an authenticated, non-privileged local user.

Business Impact

Successful exploitation allows a local user to achieve high impact across confidentiality, integrity, and availability. Given the CVSS score of 7.8, this vulnerability poses a significant risk to workstations or servers utilizing affected graphics drivers, potentially leading to unauthorized data access or complete system compromise.

Remediation Plan

Immediate Action: Update the Imagination Technologies Graphics DDK to version 25.3 RTM or later to resolve the reference counting flaw.

Proactive Monitoring: Monitor system logs for unusual GPU driver crashes or kernel-level errors that may indicate exploitation attempts.

Compensating Controls: Restrict access to the affected system to trusted users only, as the vulnerability requires local access to execute the malicious GPU system calls.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of January 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for kernel-level memory corruption.

Analyst Recommendation

The severity of this issue necessitates prompt action, particularly in multi-user environments where local privilege escalation is a primary concern. Administrators should prioritize updating the Graphics DDK to the version specified by the vendor to eliminate the underlying memory mismanagement flaw.