# Imagination Technologies Graphics DDK.

Every CVE that names Imagination Technologies Graphics DDK among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory](https://agentprime.io/advisories/CVE-2025-25179.md)
  `CVE-2025-25179` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-280
- [GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)](https://agentprime.io/advisories/CVE-2024-47893.md)
  `CVE-2024-47893` · CVE record: Imagination Technologies Graphics DDK · CVSS 6.5 Medium · Not analysed yet · Published 17 May 2025 · Tags: CWE-823
- [GPU DDK - Improper locking when accessing the pvr_exp_fence object](https://agentprime.io/advisories/CVE-2025-1706.md)
  `CVE-2025-1706` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.5 High · Not analysed yet · Published 17 May 2025 · Tags: Memory corruption
- [GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write](https://agentprime.io/advisories/CVE-2025-0467.md)
  `CVE-2025-0467` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.2 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-823
- [GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory](https://agentprime.io/advisories/CVE-2025-25178.md)
  `CVE-2025-25178` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-1284
- [GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)](https://agentprime.io/advisories/CVE-2025-0468.md)
  `CVE-2025-0468` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-280
- [GPU DDK - \_WrapExtMemReleasePages called twice if \_FlushUMVirtualRange fails](https://agentprime.io/advisories/CVE-2025-0835.md)
  `CVE-2025-0835` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2025 · Tags: Memory corruption
- [GPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM object](https://agentprime.io/advisories/CVE-2025-0478.md)
  `CVE-2025-0478` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2025 · Tags: CWE-280
- [GPU DDK - Exploitable kernel double free on apsFenceSyncCheckpoints allocated with arbitrary size](https://agentprime.io/advisories/CVE-2024-12837.md)
  `CVE-2024-12837` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 7 Mar 2025 · Tags: Memory corruption
- [GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address](https://agentprime.io/advisories/CVE-2024-12576.md)
  `CVE-2024-12576` · CVE record: Imagination Technologies Graphics DDK · CVSS 5.5 Medium · Not analysed yet · Published 7 Mar 2025 · Tags: Memory corruption
- [GPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet](https://agentprime.io/advisories/CVE-2024-12577.md)
  `CVE-2024-12577` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.3 High · Not analysed yet · Published 22 Feb 2025 · Tags: CWE-823
- [GPU DDK - RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write](https://agentprime.io/advisories/CVE-2024-52939.md)
  `CVE-2024-52939` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 22 Feb 2025 · Tags: CWE-823
- [GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex](https://agentprime.io/advisories/CVE-2024-47896.md)
  `CVE-2024-47896` · CVE record: Imagination Technologies Graphics DDK · CVSS 3.3 Low · Not analysed yet · Published 22 Feb 2025 · Tags: CWE-823
- [GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping](https://agentprime.io/advisories/CVE-2024-46975.md)
  `CVE-2024-46975` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.9 High · Not analysed yet · Published 22 Feb 2025 · Tags: Privilege escalation
- [GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes](https://agentprime.io/advisories/CVE-2024-47900.md)
  `CVE-2024-47900` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 31 Jan 2025 · Tags: CWE-823
- [GPU DDK - PVRSRVDeviceServicesOpen use-after-free condition](https://agentprime.io/advisories/CVE-2024-47899.md)
  `CVE-2024-47899` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 31 Jan 2025 · Tags: Memory corruption
- [GPU DDK - PVRSRVDeviceSyncOpen use-after-free condition](https://agentprime.io/advisories/CVE-2024-47898.md)
  `CVE-2024-47898` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 31 Jan 2025 · Tags: Memory corruption
- [GPU DDK - Exploitable double free on PTL_STREAM_DESC object in the kernel function TLServerCloseStreamKM due to a race condition](https://agentprime.io/advisories/CVE-2024-47891.md)
  `CVE-2024-47891` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 31 Jan 2025 · Tags: Memory corruption
- [GPU DDK - Arbitrary write of read-only dmabuf](https://agentprime.io/advisories/CVE-2024-46974.md)
  `CVE-2024-46974` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 31 Jan 2025 · Tags: Privilege escalation, CWE-274
- [GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write](https://agentprime.io/advisories/CVE-2024-52938.md)
  `CVE-2024-52938` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-823
- [GPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore](https://agentprime.io/advisories/CVE-2024-52937.md)
  `CVE-2024-52937` · CVE record: Imagination Technologies Graphics DDK · CVSS 6.7 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-823
- [GPU DDK - rgxfw_hwperf_config OOB read & write](https://agentprime.io/advisories/CVE-2024-52936.md)
  `CVE-2024-52936` · CVE record: Imagination Technologies Graphics DDK · CVSS 4.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-823
- [GPU DDK - psContext->eDM gives OOB write](https://agentprime.io/advisories/CVE-2024-52935.md)
  `CVE-2024-52935` · CVE record: Imagination Technologies Graphics DDK · CVSS 4.1 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-823
- [GPU DDK - OOB read into fwlog due to unchecked block count](https://agentprime.io/advisories/CVE-2024-47895.md)
  `CVE-2024-47895` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-823
- [GPU DDK - Out of bounds read into fwlog due to unchecked loop bounds](https://agentprime.io/advisories/CVE-2024-47894.md)
  `CVE-2024-47894` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.1 High · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-823
- [GPU DDK - PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write](https://agentprime.io/advisories/CVE-2024-47897.md)
  `CVE-2024-47897` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2025 · Tags: Memory corruption
- [GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)](https://agentprime.io/advisories/CVE-2024-43705.md)
  `CVE-2024-43705` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-280
- [Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement](https://agentprime.io/advisories/CVE-2024-46973.md)
  `CVE-2024-46973` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 28 Dec 2024 · Tags: Memory corruption
- [GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence](https://agentprime.io/advisories/CVE-2024-46972.md)
  `CVE-2024-46972` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 28 Dec 2024 · Tags: CWE-911
- [GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)](https://agentprime.io/advisories/CVE-2024-47892.md)
  `CVE-2024-47892` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2024 · Tags: Race condition, Memory corruption
- [GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems](https://agentprime.io/advisories/CVE-2024-46971.md)
  `CVE-2024-46971` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2024 · Tags: Race condition, Memory corruption
- [GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF](https://agentprime.io/advisories/CVE-2024-43703.md)
  `CVE-2024-43703` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.1 High · Not analysed yet · Published 30 Nov 2024 · Tags: Memory corruption
- [GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages](https://agentprime.io/advisories/CVE-2024-43702.md)
  `CVE-2024-43702` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.1 High · Not analysed yet · Published 30 Nov 2024 · Tags: CWE-280
- [GPU DDK - PowerVR: PVRSRVAcquireProcessHandleBase can cause psProcessHandleBase reuse when PIDs are reused](https://agentprime.io/advisories/CVE-2024-43704.md)
  `CVE-2024-43704` · CVE record: Imagination Technologies Graphics DDK · CVSS 8.4 High · Not analysed yet · Published 18 Nov 2024 · Tags: Information disclosure
- [GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices](https://agentprime.io/advisories/CVE-2024-43701.md)
  `CVE-2024-43701` · CVE record: Imagination Technologies Graphics DDK · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2024 · Tags: Race condition, Memory corruption

Newest: <https://agentprime.io/advisories/technology/imagination-technologies-graphics-ddk.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=imagination-technologies-graphics-ddk&cursor=WyIyMDI1LTA2LTE2VDExOjEzOjE5LjIzMjAwMFoiLCJDVkUtMjAyNS00NjcxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/imagination-technologies-graphics-ddk/?cursor=WyIyMDI1LTA2LTE2VDExOjEzOjE5LjIzMjAwMFoiLCJDVkUtMjAyNS00NjcxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.