EUVD-2026-54347
GHSA-6g52-rc6p-5579
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Local access and non-privileged user required to issue GPU syscalls; availability-only impact via kernel crash; no confidentiality or integrity exposure.
Primary rating from Vendor (imaginationtech).
CVSS VectorVendor: imaginationtech
Lifecycle Timeline
3DescriptionCVE.org
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path.
Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions, platform instability and denial of service.
AnalysisAI
Kernel null pointer dereference in Imagination Technologies Graphics DDK allows a local non-privileged user to crash the host system via crafted GPU system calls. Multiple release branches are affected, including DDK 26.1 RTM1, 25.1-25.3 RTM, 24.2 RTM2, 23.2 RTM2, and 1.18 RTM2. An attacker with a local shell account on a device running the affected kernel driver can trigger platform instability or a full denial of service - no exploit has been publicly identified at time of analysis, and EPSS probability is extremely low at 0.15% (5th percentile).
Technical ContextAI
Imagination Technologies Graphics DDK (CPE: cpe:2.3:a:imagination_technologies:graphics_ddk:*:*:*:*:*:*:*:*) is the driver development kit for PowerVR-class GPU IP cores, commonly embedded in mobile SoCs and embedded platforms. The vulnerability (CWE-476, NULL Pointer Dereference) resides in the kernel-mode driver component: a function executing within a kernel thread reaches an error path without properly validating a pointer before dereferencing it. An out-of-bounds GPU system call from user space triggers this error path, causing the kernel to dereference a null pointer. The result is a kernel exception propagating to platform instability or denial of service. Because the flaw is exercised via GPU ioctls/system calls, exploitation requires only local process execution - no kernel exploit primitives for privilege escalation are implied by the description.
RemediationAI
Consult the Imagination Technologies GPU driver vulnerabilities advisory at https://www.imaginationtech.com/gpu-driver-vulnerabilities/ for patched DDK releases; no exact fixed version number is independently confirmed from the available data, so treat vendor guidance as authoritative. As a compensating control where driver updates cannot be deployed immediately, restrict local user access to GPU device nodes (e.g., /dev/dri/* or equivalent) using discretionary access controls or mandatory access control frameworks such as SELinux or AppArmor, limiting GPU ioctl access to only trusted processes. Reducing the attack surface by preventing untrusted local users from executing code on GPU-enabled systems is the most effective short-term mitigation; this does carry the trade-off of breaking GPU-accelerated workloads for restricted users.
More in Graphics Ddk
View allMemory corruption and information disclosure in Imagination Graphics DDK allows remote unauthenticated attackers to expl
Out-of-bounds write in the Imagination Technologies Graphics DDK (GPU user-space driver) can be triggered when a victim
GPU shader compiler memory corruption via malicious shader code allows remote code execution when the compiler runs with
Out-of-bounds kernel write in Imagination Technologies Graphics DDK (PowerVR GPU driver) allows a local non-privileged p
Out-of-bounds kernel memory read/write in Imagination Technologies Graphics DDK (the driver kit for PowerVR GPUs) allows
Untrusted pointer dereference in Imagination Technologies Graphics DDK allows a local attacker with Rich Execution Envir
Local memory-corruption escalation in Imagination Technologies' Graphics DDK (the PowerVR GPU driver stack) lets an unpr
Local privilege escalation in Imagination Technologies' Graphics DDK (PowerVR GPU driver) lets a non-privileged user tri
Privilege escalation in Imagination Technologies Graphics DDK allows guest VM kernel software to issue crafted commands
Privilege escalation in Imagination Technologies' Graphics DDK GPU driver allows kernel-level software inside a Host VM
Privilege escalation in Imagination Technologies Graphics DDK allows a malicious guest VM with GPU access to send crafte
Out-of-bounds write in Imagination Technologies Graphics DDK allows a malicious guest VM to issue improper GPU commands
Same weakness CWE-476 – NULL Pointer Dereference
View allSame technique Null Pointer Dereference
View allShare
External POC / Exploit Code
Leaving vuln.today