# Imagination Technologies Graphics DDK.

Every CVE that names Imagination Technologies Graphics DDK among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [GPU DDK - OOB write in UntwiddlePOTSquare64bpp](https://agentprime.io/advisories/CVE-2026-74915.md)
  `CVE-2026-74915` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-823
- [GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB](https://agentprime.io/advisories/CVE-2026-74912.md)
  `CVE-2026-74912` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-823
- [GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet](https://agentprime.io/advisories/CVE-2026-19199.md)
  `CVE-2026-19199` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation](https://agentprime.io/advisories/CVE-2026-18629.md)
  `CVE-2026-18629` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change](https://agentprime.io/advisories/CVE-2026-65587.md)
  `CVE-2026-65587` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM](https://agentprime.io/advisories/CVE-2026-65586.md)
  `CVE-2026-65586` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo](https://agentprime.io/advisories/CVE-2026-65584.md)
  `CVE-2026-65584` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()](https://agentprime.io/advisories/CVE-2026-15466.md)
  `CVE-2026-15466` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.0 High · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption
- [GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet](https://agentprime.io/advisories/CVE-2026-45197.md)
  `CVE-2026-45197` · CVE record: Imagination Technologies Graphics DDK · CVSS 2.5 Low · Not analysed yet · Published 4 Sept 2026 · Tags: Race condition
- [GPU DDK - Double free in \_FreeOSPages due to incorrect allocation flag set by \_EncodeAllocationFlags](https://agentprime.io/advisories/CVE-2026-45200.md)
  `CVE-2026-45200` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [GPU DDK - Silent High-Order CMA Memory Leak & Double Free in \`\_FreeOSPages_Fast\`](https://agentprime.io/advisories/CVE-2026-45202.md)
  `CVE-2026-45202` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Memory corruption
- [GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory](https://agentprime.io/advisories/CVE-2026-45201.md)
  `CVE-2026-45201` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-1284
- [GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers](https://agentprime.io/advisories/CVE-2026-45199.md)
  `CVE-2026-45199` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-823
- [GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem](https://agentprime.io/advisories/CVE-2026-49746.md)
  `CVE-2026-49746` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 7 Aug 2026 · Tags: CWE-823
- [GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory](https://agentprime.io/advisories/CVE-2026-45204.md)
  `CVE-2026-45204` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Memory corruption
- [GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted](https://agentprime.io/advisories/CVE-2026-45198.md)
  `CVE-2026-45198` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 7 Aug 2026 · Tags: Memory corruption
- [GPU DDK - Integer overflow in \_PMRLogicalOffsetToPhysicalOffset](https://agentprime.io/advisories/CVE-2026-16280.md)
  `CVE-2026-16280` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption
- [GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0](https://agentprime.io/advisories/CVE-2026-49745.md)
  `CVE-2026-49745` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-823
- [GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()](https://agentprime.io/advisories/CVE-2026-49744.md)
  `CVE-2026-49744` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-823
- [GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed](https://agentprime.io/advisories/CVE-2026-49743.md)
  `CVE-2026-49743` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption
- [GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU](https://agentprime.io/advisories/CVE-2026-45203.md)
  `CVE-2026-45203` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: Race condition
- [GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel](https://agentprime.io/advisories/CVE-2026-45196.md)
  `CVE-2026-45196` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-280
- [GPU DDK - Page UAF read in PMMETA_PROTECT heap memory](https://agentprime.io/advisories/CVE-2026-7639.md)
  `CVE-2026-7639` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-459
- [GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse](https://agentprime.io/advisories/CVE-2026-41154.md)
  `CVE-2026-41154` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: Memory corruption
- [GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem](https://agentprime.io/advisories/CVE-2026-34196.md)
  `CVE-2026-34196` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: Memory corruption
- [GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted](https://agentprime.io/advisories/CVE-2026-45195.md)
  `CVE-2026-45195` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-280
- [GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation](https://agentprime.io/advisories/CVE-2026-21734.md)
  `CVE-2026-21734` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.7 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-823
- [GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference](https://agentprime.io/advisories/CVE-2026-41156.md)
  `CVE-2026-41156` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.7 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption
- [GPU DDK - \_MMU_AllocLevel error recovery paths leave dangling page table entries](https://agentprime.io/advisories/CVE-2026-34192.md)
  `CVE-2026-34192` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.7 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption
- [GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrink](https://agentprime.io/advisories/CVE-2026-41158.md)
  `CVE-2026-41158` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2026 · Tags: Memory corruption
- [GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3D](https://agentprime.io/advisories/CVE-2026-41157.md)
  `CVE-2026-41157` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: Memory corruption
- [GPU DDK - SharedSecMem mapped into all GPU virtual address spaces](https://agentprime.io/advisories/CVE-2026-41155.md)
  `CVE-2026-41155` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-653
- [GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes](https://agentprime.io/advisories/CVE-2026-34195.md)
  `CVE-2026-34195` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.8 High · Not analysed yet · Published 12 Jun 2026 · Tags: Memory corruption
- [GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index count](https://agentprime.io/advisories/CVE-2026-34194.md)
  `CVE-2026-34194` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-468
- [GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical](https://agentprime.io/advisories/CVE-2026-22164.md)
  `CVE-2026-22164` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2026 · Tags: Memory corruption
- [GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()](https://agentprime.io/advisories/CVE-2026-34193.md)
  `CVE-2026-34193` · CVE record: Imagination Technologies Graphics DDK · CVSS 4.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-823
- [GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable](https://agentprime.io/advisories/CVE-2026-22166.md)
  `CVE-2026-22166` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.1 High · Not analysed yet · Published 1 May 2026 · Tags: Memory corruption
- [GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs](https://agentprime.io/advisories/CVE-2026-22165.md)
  `CVE-2026-22165` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.1 High · Not analysed yet · Published 1 May 2026 · Tags: Memory corruption
- [GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memory](https://agentprime.io/advisories/CVE-2026-22167.md)
  `CVE-2026-22167` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 1 May 2026 · Tags: Memory corruption
- [GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)](https://agentprime.io/advisories/CVE-2026-21733.md)
  `CVE-2026-21733` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.3 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-20, CWE-280
- [GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU](https://agentprime.io/advisories/CVE-2026-22163.md)
  `CVE-2026-22163` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-820
- [GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation](https://agentprime.io/advisories/CVE-2026-21732.md)
  `CVE-2026-21732` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-823
- [GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled](https://agentprime.io/advisories/CVE-2026-21736.md)
  `CVE-2026-21736` · CVE record: Imagination Technologies Graphics DDK · CVSS 4.4 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: CWE-280
- [GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP](https://agentprime.io/advisories/CVE-2025-13952.md)
  `CVE-2025-13952` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jan 2026 · Tags: Memory corruption
- [GPU DDK - DevmemIntGetReservationData does not ref the PMR it returns](https://agentprime.io/advisories/CVE-2025-10865.md)
  `CVE-2025-10865` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF](https://agentprime.io/advisories/CVE-2025-58411.md)
  `CVE-2025-58411` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory](https://agentprime.io/advisories/CVE-2025-58409.md)
  `CVE-2025-58409` · CVE record: Imagination Technologies Graphics DDK · CVSS 3.5 Low · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world](https://agentprime.io/advisories/CVE-2025-25176.md)
  `CVE-2025-25176` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code](https://agentprime.io/advisories/CVE-2025-58408.md)
  `CVE-2025-58408` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: Memory corruption
- [GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet](https://agentprime.io/advisories/CVE-2025-58407.md)
  `CVE-2025-58407` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.4 High · Not analysed yet · Published 17 Nov 2025 · Tags: Race condition
- [GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR](https://agentprime.io/advisories/CVE-2025-58410.md)
  `CVE-2025-58410` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2025 · Tags: CWE-280
- [GPU DDK - NULL Pointer dereference occurs in LockHandle on bridge entry when connection misused](https://agentprime.io/advisories/CVE-2025-46711.md)
  `CVE-2025-46711` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Memory corruption
- [GPU DDK - Roll-back of pvr_exp_fence not in finalised state can cause UAF](https://agentprime.io/advisories/CVE-2025-25177.md)
  `CVE-2025-25177` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.1 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: Memory corruption
- [GPU DDK - Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leak](https://agentprime.io/advisories/CVE-2025-46709.md)
  `CVE-2025-46709` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2025 · Tags: Memory corruption
- [GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite](https://agentprime.io/advisories/CVE-2025-6573.md)
  `CVE-2025-6573` · CVE record: Imagination Technologies Graphics DDK · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2025 · Tags: CWE-280
- [GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation](https://agentprime.io/advisories/CVE-2025-8109.md)
  `CVE-2025-8109` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.8 High · Not analysed yet · Published 4 Aug 2025 · Tags: CWE-280
- [GPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist](https://agentprime.io/advisories/CVE-2025-25180.md)
  `CVE-2025-25180` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2025 · Tags: CWE-823
- [GPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs](https://agentprime.io/advisories/CVE-2025-46708.md)
  `CVE-2025-46708` · CVE record: Imagination Technologies Graphics DDK · CVSS 4.3 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: CWE-280
- [GPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it](https://agentprime.io/advisories/CVE-2025-46707.md)
  `CVE-2025-46707` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.2 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: Information disclosure
- [Use after free in Imagination Technologies Graphics DDK](https://agentprime.io/advisories/CVE-2025-46710.md)
  `CVE-2025-46710` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.7 Medium · Not analysed yet · Published 16 Jun 2025 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/imagination-technologies-graphics-ddk.md?cursor=WyIyMDI1LTA2LTE2VDExOjEzOjE5LjIzMjAwMFoiLCJDVkUtMjAyNS00NjcxMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=imagination-technologies-graphics-ddk>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/imagination-technologies-graphics-ddk/>. Everything for agents: <https://agentprime.io/llms.txt>.