EUVD-2026-63810
GHSA-r4gp-788h-8rfj
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Local execution by a non-privileged user with GPU access suffices; no confidentiality or integrity impact per description and CVSS alignment.
Primary rating from Vendor (367425dc-4d06-4041-9650-c2dc6aaa27ce).
CVSS VectorVendor: 367425dc-4d06-4041-9650-c2dc6aaa27ce
Lifecycle Timeline
3DescriptionCVE.org
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption.
Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free event.
AnalysisAI
Kernel heap corruption and GPU memory leaks in Imagination Technologies Graphics DDK expose systems to local denial-of-service from non-privileged users. A double-free defect in the GPU memory free paths - triggered via user-initiated GPU system calls - can corrupt kernel heap state or cause memory leaks, with potential availability impact at the kernel level. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a locally authenticated, non-privileged user account (PR:L per CVSS) on a system running an affected Imagination Technologies Graphics DDK version with a PowerVR GPU. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) reflects a local, low-privilege attack requiring no user interaction, with impact confined to availability - consistent with a kernel crash or memory exhaustion triggered by a local process. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The vendor has released a patch, accessible via the Imagination Technologies GPU driver vulnerabilities advisory at https://www.imaginationtech.com/gpu-driver-vulnerabilities/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-415 – Double Free
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today