agentprime: imagination-technologies-graphics-ddkEvery new CVE for imagination-technologies-graphics-ddk.https://agentprime.io/CVE-2026-74915: GPU DDK - OOB write in UntwiddlePOTSquare64bpphttps://agentprime.io/advisories/CVE-2026-74915/https://agentprime.io/advisories/CVE-2026-74915/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 02:11:22 GMTCVECVE-2026-74912: GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GBhttps://agentprime.io/advisories/CVE-2026-74912/https://agentprime.io/advisories/CVE-2026-74912/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 02:07:31 GMTCVEcriticalCVE-2026-19199: GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSethttps://agentprime.io/advisories/CVE-2026-19199/https://agentprime.io/advisories/CVE-2026-19199/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 02:03:39 GMTCVECVE-2026-18629: GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilationhttps://agentprime.io/advisories/CVE-2026-18629/https://agentprime.io/advisories/CVE-2026-18629/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 02:00:30 GMTCVECVE-2026-65587: GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL changehttps://agentprime.io/advisories/CVE-2026-65587/https://agentprime.io/advisories/CVE-2026-65587/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 01:56:26 GMTCVECVE-2026-65586: GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKMhttps://agentprime.io/advisories/CVE-2026-65586/https://agentprime.io/advisories/CVE-2026-65586/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 01:42:18 GMTCVECVE-2026-65584: GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfohttps://agentprime.io/advisories/CVE-2026-65584/https://agentprime.io/advisories/CVE-2026-65584/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 01:32:56 GMTCVECVE-2026-15466: GPU DDK - Write UAF due to a race condition caused by insufficient locking in PVRSRVRGXCloseHWPerfClientStreamKM()https://agentprime.io/advisories/CVE-2026-15466/https://agentprime.io/advisories/CVE-2026-15466/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 01:23:24 GMTCVECVE-2026-45197: GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSethttps://agentprime.io/advisories/CVE-2026-45197/https://agentprime.io/advisories/CVE-2026-45197/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 01:53:55 GMTCVECVE-2026-45200: GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlagshttps://agentprime.io/advisories/CVE-2026-45200/https://agentprime.io/advisories/CVE-2026-45200/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 01:45:46 GMTCVECVE-2026-45202: GPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`https://agentprime.io/advisories/CVE-2026-45202/https://agentprime.io/advisories/CVE-2026-45202/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 04:09:15 GMTCVECVE-2026-45201: GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memoryhttps://agentprime.io/advisories/CVE-2026-45201/https://agentprime.io/advisories/CVE-2026-45201/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 04:01:04 GMTCVECVE-2026-45199: GPU DDK - rgxfw_to_ptr() does not reject FW private data pointershttps://agentprime.io/advisories/CVE-2026-45199/https://agentprime.io/advisories/CVE-2026-45199/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 03:36:39 GMTCVECVE-2026-49746: GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMemhttps://agentprime.io/advisories/CVE-2026-49746/https://agentprime.io/advisories/CVE-2026-49746/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 01:59:38 GMTCVECVE-2026-45204: GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memoryhttps://agentprime.io/advisories/CVE-2026-45204/https://agentprime.io/advisories/CVE-2026-45204/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 01:53:10 GMTCVECVE-2026-45198: GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrustedhttps://agentprime.io/advisories/CVE-2026-45198/https://agentprime.io/advisories/CVE-2026-45198/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 01:42:54 GMTCVECVE-2026-16280: GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffsethttps://agentprime.io/advisories/CVE-2026-16280/https://agentprime.io/advisories/CVE-2026-16280/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 22:02:38 GMTCVEcriticalCVE-2026-49745: GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0https://agentprime.io/advisories/CVE-2026-49745/https://agentprime.io/advisories/CVE-2026-49745/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 08:55:40 GMTCVECVE-2026-49744: GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()https://agentprime.io/advisories/CVE-2026-49744/https://agentprime.io/advisories/CVE-2026-49744/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 08:51:16 GMTCVECVE-2026-49743: GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closedhttps://agentprime.io/advisories/CVE-2026-49743/https://agentprime.io/advisories/CVE-2026-49743/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 08:42:51 GMTCVECVE-2026-45203: GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOUhttps://agentprime.io/advisories/CVE-2026-45203/https://agentprime.io/advisories/CVE-2026-45203/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:57:19 GMTCVECVE-2026-45196: GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernelhttps://agentprime.io/advisories/CVE-2026-45196/https://agentprime.io/advisories/CVE-2026-45196/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:53:50 GMTCVECVE-2026-7639: GPU DDK - Page UAF read in PMMETA_PROTECT heap memoryhttps://agentprime.io/advisories/CVE-2026-7639/https://agentprime.io/advisories/CVE-2026-7639/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:50:27 GMTCVECVE-2026-41154: GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparsehttps://agentprime.io/advisories/CVE-2026-41154/https://agentprime.io/advisories/CVE-2026-41154/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:46:06 GMTCVECVE-2026-34196: GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMemhttps://agentprime.io/advisories/CVE-2026-34196/https://agentprime.io/advisories/CVE-2026-34196/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:42:17 GMTCVECVE-2026-45195: GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrustedhttps://agentprime.io/advisories/CVE-2026-45195/https://agentprime.io/advisories/CVE-2026-45195/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 15:18:20 GMTCVECVE-2026-21734: GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilationhttps://agentprime.io/advisories/CVE-2026-21734/https://agentprime.io/advisories/CVE-2026-21734/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 15:14:00 GMTCVECVE-2026-41156: GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding referencehttps://agentprime.io/advisories/CVE-2026-41156/https://agentprime.io/advisories/CVE-2026-41156/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 09:28:53 GMTCVECVE-2026-34192: GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entrieshttps://agentprime.io/advisories/CVE-2026-34192/https://agentprime.io/advisories/CVE-2026-34192/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 09:23:33 GMTCVECVE-2026-41158: GPU DDK - Backed sparse PMRs are not handled by deferred free mechanism after shrinkhttps://agentprime.io/advisories/CVE-2026-41158/https://agentprime.io/advisories/CVE-2026-41158/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 21:57:29 GMTCVECVE-2026-41157: GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3Dhttps://agentprime.io/advisories/CVE-2026-41157/https://agentprime.io/advisories/CVE-2026-41157/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 21:53:00 GMTCVEcriticalCVE-2026-41155: GPU DDK - SharedSecMem mapped into all GPU virtual address spaceshttps://agentprime.io/advisories/CVE-2026-41155/https://agentprime.io/advisories/CVE-2026-41155/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 21:48:56 GMTCVECVE-2026-34195: GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexeshttps://agentprime.io/advisories/CVE-2026-34195/https://agentprime.io/advisories/CVE-2026-34195/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 21:43:40 GMTCVECVE-2026-34194: GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index counthttps://agentprime.io/advisories/CVE-2026-34194/https://agentprime.io/advisories/CVE-2026-34194/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 14:58:40 GMTCVECVE-2026-22164: GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogicalhttps://agentprime.io/advisories/CVE-2026-22164/https://agentprime.io/advisories/CVE-2026-22164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 14:53:26 GMTCVECVE-2026-34193: GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()https://agentprime.io/advisories/CVE-2026-34193/https://agentprime.io/advisories/CVE-2026-34193/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 11:14:50 GMTCVECVE-2026-22166: GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachablehttps://agentprime.io/advisories/CVE-2026-22166/https://agentprime.io/advisories/CVE-2026-22166/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 May 2026 15:59:56 GMTCVECVE-2026-22165: GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBshttps://agentprime.io/advisories/CVE-2026-22165/https://agentprime.io/advisories/CVE-2026-22165/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 May 2026 15:56:17 GMTCVECVE-2026-22167: GPU DDK - Cache resident PM buffers writable by other GPU requestors, leading to arbitrary write to physical memoryhttps://agentprime.io/advisories/CVE-2026-22167/https://agentprime.io/advisories/CVE-2026-22167/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 May 2026 15:48:49 GMTCVECVE-2026-21733: GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)https://agentprime.io/advisories/CVE-2026-21733/https://agentprime.io/advisories/CVE-2026-21733/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 16:08:25 GMTCVECVE-2026-22163: GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPUhttps://agentprime.io/advisories/CVE-2026-22163/https://agentprime.io/advisories/CVE-2026-22163/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 22:52:43 GMTCVECVE-2026-21732: GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationhttps://agentprime.io/advisories/CVE-2026-21732/https://agentprime.io/advisories/CVE-2026-21732/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 22:48:42 GMTCVEcriticalCVE-2026-21736: GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabledhttps://agentprime.io/advisories/CVE-2026-21736/https://agentprime.io/advisories/CVE-2026-21736/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 12:23:38 GMTCVECVE-2025-13952: GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBPhttps://agentprime.io/advisories/CVE-2025-13952/https://agentprime.io/advisories/CVE-2025-13952/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Jan 2026 02:26:49 GMTCVEcriticalCVE-2025-10865: GPU DDK - DevmemIntGetReservationData does not ref the PMR it returnshttps://agentprime.io/advisories/CVE-2025-10865/https://agentprime.io/advisories/CVE-2025-10865/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 17:26:45 GMTCVECVE-2025-58411: GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAFhttps://agentprime.io/advisories/CVE-2025-58411/https://agentprime.io/advisories/CVE-2025-58411/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 16:41:51 GMTCVECVE-2025-58409: GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memoryhttps://agentprime.io/advisories/CVE-2025-58409/https://agentprime.io/advisories/CVE-2025-58409/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 16:37:46 GMTCVECVE-2025-25176: GPU DDK - GPU Register value contents leaked from secure workloads to non-secure worldhttps://agentprime.io/advisories/CVE-2025-25176/https://agentprime.io/advisories/CVE-2025-25176/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 16:27:40 GMTCVEcriticalCVE-2025-58408: GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling codehttps://agentprime.io/advisories/CVE-2025-58408/https://agentprime.io/advisories/CVE-2025-58408/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Dec 2025 11:16:24 GMTCVECVE-2025-58407: GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSethttps://agentprime.io/advisories/CVE-2025-58407/https://agentprime.io/advisories/CVE-2025-58407/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Nov 2025 17:18:18 GMTCVE