imaginationtech

Latest CVEs · RSS

• CVE-2026-45197 2026-09-04
  Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's v
• CVE-2026-45200 2026-09-04
  Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause dou
• CVE-2026-45202 2026-08-21
  Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario c
• CVE-2026-45201 2026-08-21
  Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading
• CVE-2026-45199 2026-08-21
  Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualise
• CVE-2026-49746 2026-08-07
  Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU
• CVE-2026-45204 2026-08-07
  Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error
• CVE-2026-45198 2026-08-07
  Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from n
• CVE-2026-16280 2026-07-24
  An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This ca
• CVE-2026-49745 2026-07-24
  Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualise
• CVE-2026-49744 2026-07-24
  Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualise
• CVE-2026-49743 2026-07-24
  Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel,
• CVE-2026-45203 2026-07-10
  Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of m
• CVE-2026-45196 2026-07-10
  Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privile
• CVE-2026-7639 2026-07-10
  Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unpr
• CVE-2026-41154 2026-07-10
  Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in
• CVE-2026-34196 2026-07-10
  Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the
• CVE-2026-45195 2026-06-26
  Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted ra
• CVE-2026-21734 2026-06-26
  A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader com
• CVE-2026-41156 2026-06-19
  Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free sc
• CVE-2026-34192 2026-06-19
  Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulne
• CVE-2026-41158 2026-06-12
  Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and fr
• CVE-2026-41157 2026-06-12
  A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, lead
• CVE-2026-41155 2026-06-12
  An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel modul
• CVE-2026-34195 2026-06-12
  Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The produ