Imaginationtech vulnerabilities
We track 40 vulnerabilities in Imaginationtech products across 2 products. 40 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2026.
Latest Imaginationtech vulnerabilities
- 9.8 Critical severity
Graphics DDK: Integer Overflow or Wraparound
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to uninte
- 7.8 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result
- 7.8 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow priv
- 7.8 High severity
Graphics DDK: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver,
- 7.8 High severity
Graphics DDK: Incomplete Cleanup
Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a mal
- 7.8 High severity
Graphics DDK: Time-of-check Time-of-use (TOCTOU) Race Condition
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memo
- 7.8 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation.
- 7.8 High severity
Graphics DDK: Out-of-bounds Write
Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads to OOB acc
- 7.8 High severity
Graphics DDK: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allo
- 7.8 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware
- 7.7 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enab
- 7.8 High severity
Graphics DDK: Improper Restriction of Operations within the Bounds of a Memory Buffer
Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but
- 8.1 High severity
Graphics DDK: Use After Free
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this cou
- 8.1 High severity
Graphics DDK: Use After Free
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this c
- 7.3 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handling of GPU memory reservation protections.
- 7.8 High severity
Graphics DDK: Missing Synchronization
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a con
- 9.6 Critical severity
Graphics DDK: Out-of-bounds Write
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enab
- 9.8 Critical severity
Graphics DDK: Use After Free
A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this coul
- 7.8 High severity
Graphics DDK: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for
- 8.8 High severity
Graphics DDK: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario. Improper resource management and reference counting on an internal re
- 9.1 Critical severity
Graphics DDK: Exposure of Resource to Wrong Sphere
Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.
- 7.4 High severity
Graphics DDK: Time-of-check Time-of-use (TOCTOU) Race Condition
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine.
- 7.5 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource.
- 7.8 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.
- 8.2 High severity
Graphics DDK: Use of Out-of-range Pointer Offset
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
- 8.1 High severity
Graphics DDK: Use After Free
Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads and writes of physical memory from the GPU HW.
- 8.1 High severity
Graphics DDK: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access to arbitrary physical memory page.
- 7.8 High severity
Android: Use After Free
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for
- 7.8 High severity
Android: Out-of-bounds Write
In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interacti
- 7.0 High severity
Android: Use After Free
In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitati
- 7.8 High severity
Android: Integer Overflow or Wraparound
In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for explo
- 7.8 High severity
Android: Operator Precedence Logic Error
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for e
- 7.0 High severity
Android: Concurrent Execution using Shared Resource with Improper Synchronization
In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed f
- 7.0 High severity
Android: Concurrent Execution using Shared Resource with Improper Synchronization
In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitat
- 7.8 High severity
Android: Operator Precedence Logic Error
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is n
- 7.8 High severity
Android: Improper Privilege Management
In DevmemIntFreeDefBackingPage of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction
- 7.8 High severity
Android: Out-of-bounds Write
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not neede
- 7.8 High severity
Android: Use After Free
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for explo
- 7.8 High severity
Android: Use After Free
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploit
- 7.8 High severity
Android: Use After Free
In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for