CVE-2026-21734

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.

CVSS v3 7.7 HIGH

7.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.imaginationtech.com/gpu-driver-vulnerabilities/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:imaginationtech:ddk::::::::
	cpe:2.3:a:imaginationtech:ddk:25.3:rtm::::::

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Una página web que contiene código de sombreador (shader) de GPU inusual se carga en el proceso del compilador de GPU y puede desencadenar un fallo por escritura fuera de límites en la biblioteca del compilador de sombreadores (shader) de GPU. En ciertas plataformas, cuando el proceso del compilador tiene privilegios de sistema, esto podría permitir explotaciones adicionales en el dispositivo. Un caso límite que utiliza un valor muy pequeño en el código de sombreador (shader) de GPU puede causar un fallo de segmentación en el compilador de sombreadores (shader) de GPU debido a una escritura fuera de límites.

Information

Published : 2026-06-26 16:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-21734

Mitre link : CVE-2026-21734

CVE.ORG link : CVE-2026-21734

JSON object : View

Products Affected

imaginationtech

ddk

CWE

CWE-823

Use of Out-of-range Pointer Offset

{"id": "CVE-2026-21734", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21734", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-26T19:12:05.663656Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 2.5}]}, "affected": [{"source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "affectedData": [{"vendor": "Imagination Technologies", "product": "Graphics DDK", "versions": [{"status": "affected", "version": "1.18 RTM", "versionType": "custom"}, {"status": "affected", "version": "23.2 RTM", "versionType": "custom"}, {"status": "affected", "version": "24.1 RTM", "versionType": "custom", "lessThanOrEqual": "24.2 RTM"}, {"status": "affected", "version": "25.1 RTM", "versionType": "custom", "lessThanOrEqual": "25.3 RTM"}, {"status": "unaffected", "version": "26.1 RTM", "versionType": "custom"}], "platforms": ["Linux", "Android"], "defaultStatus": "unknown"}]}], "published": "2026-06-26T16:16:30.557", "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "tags": ["Vendor Advisory"], "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "description": [{"lang": "en", "value": "CWE-823"}]}], "descriptions": [{"lang": "en", "value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\n\n\nAn edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write."}, {"lang": "es", "value": "Una p\u00e1gina web que contiene c\u00f3digo de sombreador (shader) de GPU inusual se carga en el proceso del compilador de GPU y puede desencadenar un fallo por escritura fuera de l\u00edmites en la biblioteca del compilador de sombreadores (shader) de GPU. En ciertas plataformas, cuando el proceso del compilador tiene privilegios de sistema, esto podr\u00eda permitir explotaciones adicionales en el dispositivo.\n\nUn caso l\u00edmite que utiliza un valor muy peque\u00f1o en el c\u00f3digo de sombreador (shader) de GPU puede causar un fallo de segmentaci\u00f3n en el compilador de sombreadores (shader) de GPU debido a una escritura fuera de l\u00edmites."}], "lastModified": "2026-10-25T17:10:00.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D75CD5B-2B2E-44C9-8422-D808630103B4", "versionEndIncluding": "25.2"}, {"criteria": "cpe:2.3:a:imaginationtech:ddk:25.3:rtm:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B3E39FF-6C96-4A0B-9CE1-595C785DF920"}], "operator": "OR"}]}], "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}