https://vulnogram.org/ Most recent CVEs assigned by Imagination Technologies (imaginationtech). https://vulnogram.org/seaview/icons/imaginationtech.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-45197 https://vulnogram.org/CVE-2026-45197 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses… Low Fri, 04 Sep 2026 01:53:55 GMT https://vulnogram.org/CVE-2026-45200 https://vulnogram.org/CVE-2026-45200 Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination… High Fri, 04 Sep 2026 01:45:46 GMT https://vulnogram.org/CVE-2026-45202 https://vulnogram.org/CVE-2026-45202 Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. T… Medium Fri, 21 Aug 2026 04:09:15 GMT https://vulnogram.org/CVE-2026-45201 https://vulnogram.org/CVE-2026-45201 Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 p… High Fri, 21 Aug 2026 04:01:04 GMT https://vulnogram.org/CVE-2026-45199 https://vulnogram.org/CVE-2026-45199 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU whi… High Fri, 21 Aug 2026 03:36:39 GMT https://vulnogram.org/CVE-2026-49746 https://vulnogram.org/CVE-2026-49746 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and poten… High Fri, 07 Aug 2026 01:59:38 GMT https://vulnogram.org/CVE-2026-45204 https://vulnogram.org/CVE-2026-45204 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thr… Medium Fri, 07 Aug 2026 01:53:10 GMT https://vulnogram.org/CVE-2026-45198 https://vulnogram.org/CVE-2026-45198 Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memo… High Fri, 07 Aug 2026 01:42:54 GMT https://vulnogram.org/CVE-2026-16280 https://vulnogram.org/CVE-2026-16280 An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access… Critical Network Exploitable Fri, 24 Jul 2026 22:02:38 GMT https://vulnogram.org/CVE-2026-49745 https://vulnogram.org/CVE-2026-49745 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU whi… High Fri, 24 Jul 2026 08:55:40 GMT https://vulnogram.org/CVE-2026-49744 https://vulnogram.org/CVE-2026-49744 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could… High Fri, 24 Jul 2026 08:51:16 GMT https://vulnogram.org/CVE-2026-49743 https://vulnogram.org/CVE-2026-49743 Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the G… High Fri, 24 Jul 2026 08:42:51 GMT https://vulnogram.org/CVE-2026-45203 https://vulnogram.org/CVE-2026-45203 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify valu… High Fri, 10 Jul 2026 20:57:19 GMT https://vulnogram.org/CVE-2026-45196 https://vulnogram.org/CVE-2026-45196 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation. High Fri, 10 Jul 2026 20:53:50 GMT https://vulnogram.org/CVE-2026-7639 https://vulnogram.org/CVE-2026-7639 Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logi… High Fri, 10 Jul 2026 20:50:27 GMT https://vulnogram.org/CVE-2026-41154 https://vulnogram.org/CVE-2026-41154 Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads… High Fri, 10 Jul 2026 20:46:06 GMT https://vulnogram.org/CVE-2026-34196 https://vulnogram.org/CVE-2026-34196 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical… High Fri, 10 Jul 2026 20:42:17 GMT https://vulnogram.org/CVE-2026-45195 https://vulnogram.org/CVE-2026-45195 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the… High Fri, 26 Jun 2026 15:18:20 GMT https://vulnogram.org/CVE-2026-21734 https://vulnogram.org/CVE-2026-21734 A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this… High Fri, 26 Jun 2026 15:14:00 GMT https://vulnogram.org/CVE-2026-41156 https://vulnogram.org/CVE-2026-41156 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scenario. A shared resource (memory page) managed by a CPU thread of control (driver) and ac… High Fri, 19 Jun 2026 09:28:53 GMT https://vulnogram.org/CVE-2026-34192 https://vulnogram.org/CVE-2026-34192 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. T… High Fri, 19 Jun 2026 09:23:33 GMT https://vulnogram.org/CVE-2026-41158 https://vulnogram.org/CVE-2026-41158 Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/writ… High Fri, 12 Jun 2026 21:57:29 GMT https://vulnogram.org/CVE-2026-41157 https://vulnogram.org/CVE-2026-41157 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software computes a r… Critical Network Exploitable Fri, 12 Jun 2026 21:53:00 GMT https://vulnogram.org/CVE-2026-41155 https://vulnogram.org/CVE-2026-41155 An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process lea… Medium Fri, 12 Jun 2026 21:48:56 GMT https://vulnogram.org/CVE-2026-34195 https://vulnogram.org/CVE-2026-34195 Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping. High Fri, 12 Jun 2026 21:43:40 GMT https://vulnogram.org/CVE-2026-34194 https://vulnogram.org/CVE-2026-34194 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. The product accidentally refers to the wrong memory due to the semantics of… High Mon, 08 Jun 2026 14:58:40 GMT https://vulnogram.org/CVE-2026-22164 https://vulnogram.org/CVE-2026-22164 Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. By creating resources of certain types and presenting a set of parameters to the affected interface the exploit can be used to co… High Network Exploitable Mon, 08 Jun 2026 14:53:26 GMT https://vulnogram.org/CVE-2026-34193 https://vulnogram.org/CVE-2026-34193 Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host (Kernel) to pe… Medium Mon, 01 Jun 2026 11:14:50 GMT https://vulnogram.org/CVE-2026-22166 https://vulnogram.org/CVE-2026-22166 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privilege… High Fri, 01 May 2026 15:59:56 GMT https://vulnogram.org/CVE-2026-22165 https://vulnogram.org/CVE-2026-22165 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privile… High Fri, 01 May 2026 15:56:17 GMT https://vulnogram.org/CVE-2026-22167 https://vulnogram.org/CVE-2026-22167 Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU… High Fri, 01 May 2026 15:48:49 GMT https://vulnogram.org/CVE-2026-21733 https://vulnogram.org/CVE-2026-21733 Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handling of GPU memory reservation protections. High Fri, 17 Apr 2026 16:08:25 GMT https://vulnogram.org/CVE-2026-22163 https://vulnogram.org/CVE-2026-22163 Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resourc… High Fri, 20 Mar 2026 22:52:43 GMT https://vulnogram.org/CVE-2026-21732 https://vulnogram.org/CVE-2026-21732 A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this… Critical Network Exploitable Fri, 20 Mar 2026 22:48:42 GMT https://vulnogram.org/CVE-2026-21736 https://vulnogram.org/CVE-2026-21736 Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This is caused by improper handling of the memory protections for the user-mode wrapped memory r… Medium Mon, 09 Mar 2026 12:23:38 GMT https://vulnogram.org/CVE-2025-13952 https://vulnogram.org/CVE-2025-13952 A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges… Critical Network Exploitable Sat, 24 Jan 2026 02:26:49 GMT https://vulnogram.org/CVE-2025-10865 https://vulnogram.org/CVE-2025-10865 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where pote… High Tue, 13 Jan 2026 17:26:45 GMT https://vulnogram.org/CVE-2025-58411 https://vulnogram.org/CVE-2025-58411 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario. Improper resource management and reference counting on an i… High Tue, 13 Jan 2026 16:41:51 GMT https://vulnogram.org/CVE-2025-58409 https://vulnogram.org/CVE-2025-58409 Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the… Low Tue, 13 Jan 2026 16:37:46 GMT https://vulnogram.org/CVE-2025-25176 https://vulnogram.org/CVE-2025-25176 Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform. Critical Network Exploitable Tue, 13 Jan 2026 16:27:40 GMT https://vulnogram.org/CVE-2025-58408 https://vulnogram.org/CVE-2025-58408 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the sta… Medium Mon, 01 Dec 2025 11:16:24 GMT https://vulnogram.org/CVE-2025-58407 https://vulnogram.org/CVE-2025-58407 Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine. High Network Exploitable Mon, 17 Nov 2025 17:18:18 GMT https://vulnogram.org/CVE-2025-58410 https://vulnogram.org/CVE-2025-58410 Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource. High Network Exploitable Mon, 17 Nov 2025 16:57:05 GMT https://vulnogram.org/CVE-2025-46711 https://vulnogram.org/CVE-2025-46711 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions. Medium Mon, 22 Sep 2025 10:21:29 GMT https://vulnogram.org/CVE-2025-25177 https://vulnogram.org/CVE-2025-25177 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Medium Mon, 22 Sep 2025 10:02:55 GMT https://vulnogram.org/CVE-2025-46709 https://vulnogram.org/CVE-2025-46709 Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception. High Network Exploitable Fri, 08 Aug 2025 23:27:05 GMT https://vulnogram.org/CVE-2025-6573 https://vulnogram.org/CVE-2025-6573 Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from the trusted execution environment (TEE). Critical Network Exploitable Fri, 08 Aug 2025 23:19:14 GMT https://vulnogram.org/CVE-2025-8109 https://vulnogram.org/CVE-2025-8109 Software installed and run as a non-privileged user may conduct ptrace system calls to issue writes to GPU origin read only memory. High Mon, 04 Aug 2025 13:14:20 GMT https://vulnogram.org/CVE-2025-25180 https://vulnogram.org/CVE-2025-25180 Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the… High Mon, 14 Jul 2025 01:36:14 GMT https://vulnogram.org/CVE-2025-46708 https://vulnogram.org/CVE-2025-46708 Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU. Medium Fri, 27 Jun 2025 17:04:00 GMT