EUVD-2026-26663Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Lifecycle Timeline
9DescriptionCVE.org
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system.
AnalysisAI
Use-after-free in Imagination Graphics DDK GPU GLES user-space library allows authenticated remote attackers to crash the GPU render process via crafted WebGPU content. CVSS 8.1 (High) with network vector and low complexity. On platforms where the GPU process runs with elevated system privileges, successful exploitation could enable system-level compromise beyond the initial crash. EPSS and KEV data not provided; SSVC framework indicates no confirmed exploitation, non-automatable attack, but total technical impact. Vendor patches available across affected DDK versions 1.18, 23.2, 24.1-24.2, and 25.1-25.3.
Technical ContextAI
This vulnerability affects Imagination Technologies Graphics Driver Development Kit (DDK), specifically the GPU GLES (OpenGL ES) user-space shared library that processes WebGPU workloads. WebGPU is a modern web graphics API enabling GPU-accelerated rendering in browsers. The flaw is a use-after-free (CWE-416), a memory corruption class where code continues to reference memory after it has been freed, potentially allowing attackers to control freed memory contents. The vulnerability manifests when unusual or malformed WebGPU content is loaded into the GPU GLES render process. Affected versions span multiple DDK release trains: 1.18 RTM, 23.2 RTM, 24.1-24.2 RTM, and 25.1-25.3 RTM. The user-space library architecture means exploitation occurs in the context of the GPU process, whose privilege level varies by platform - on systems where GPU workloads run with elevated privileges (common in embedded, automotive, or certain mobile platforms), the impact escalates beyond typical sandboxed browser rendering.
RemediationAI
Upgrade to patched Graphics DDK versions released by Imagination Technologies per their security advisory at https://www.imaginationtech.com/gpu-driver-vulnerabilities/. Specific fix versions not enumerated in available data - consult vendor advisory for exact patched releases corresponding to each affected branch (1.18, 23.2, 24.1-24.2, 25.1-25.3). If immediate patching is not feasible, implement compensating controls: disable WebGPU support in browser/application configurations (prevents delivery of malicious WebGPU content, breaks WebGPU-dependent web applications), restrict GPU process privileges to minimum necessary (reduces escalation potential but may conflict with hardware acceleration requirements), apply network-level access controls to limit authenticated user access to untrusted web content (reduces attack surface, impacts user experience). For embedded/automotive deployments, evaluate GPU process sandboxing or privilege separation if not already implemented. No workarounds fully mitigate the vulnerability - patching is the primary remediation.
Write-after-free crash in GPU compiler process triggered by unusual GPU shader code loaded from the web. Browser vulnera
A hardware vulnerability allows exfiltration of intermediate register values from secure workloads running in ARM TrustZ
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reso
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou
Remote authenticated attackers can execute code or cause persistent denial-of-service in Imagination Technologies Graphi
GPU privilege escalation vulnerability allowing non-privileged users to conduct improper GPU system calls that bypass GP
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of refe
Local privilege escalation in Imagination Technologies Graphics DDK allows low-privileged users to corrupt kernel memory
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data
Possible kernel exceptions caused by reading and writing kernel heap data after free.
Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.
Improper GPU system call handling in the DDK allows non-privileged users to bypass memory protections on user-mode wrapp
Same weakness CWE-416 – Use After Free
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today