EUVD-2026-54346
GHSA-952j-524v-rjh4
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Requires full REE kernel control (PR:H); crosses into GPU Firmware security domain (S:C); local-only vector with no user interaction needed once kernel access is held.
Primary rating from Vendor (imaginationtech).
CVSS VectorVendor: imaginationtech
Lifecycle Timeline
4DescriptionCVE.org
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory.
The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.
AnalysisAI
Untrusted pointer dereference in Imagination Technologies Graphics DDK allows a local attacker with Rich Execution Environment (REE) kernel control to corrupt GPU Firmware data across the TEE security boundary. The GPU Firmware blindly dereferences a pointer sourced from non-secure memory when moving internal data between tightly coupled private memory and main memory - a trust boundary violation that undermines the fundamental isolation guarantee of Trusted Execution Environment platforms. No active exploitation has been confirmed (CISA KEV absent), and EPSS sits at 0.15% (5th percentile), but the cross-domain nature of this flaw makes it relevant for embedded, mobile, and automotive threat models where TEE integrity is a security anchor.
Technical ContextAI
The flaw resides in Imagination Technologies Graphics DDK (CPE: cpe:2.3:a:imagination_technologies:graphics_ddk:*:*:*:*:*:*:*:*), the driver development kit that enables GPU Firmware to interface with the host OS. On TEE-capable platforms (e.g., ARM TrustZone architectures), the system is partitioned into a Rich Execution Environment (REE) - the normal-world OS such as Linux or Android - and a Trusted Execution Environment (TEE) for secure workloads. The GPU Firmware operates in a privileged context outside the REE's control boundary. CWE-822 (Untrusted Pointer Dereference) identifies the root cause: the GPU Firmware reads a pointer value from non-secure REE memory and dereferences it without validation when saving or restoring internal state to/from main memory. Because the REE kernel has write access to its own non-secure memory, this pointer is fully attacker-controllable once kernel-level access is obtained, allowing the attacker to redirect GPU Firmware memory operations to arbitrary locations.
RemediationAI
Consult the Imagination Technologies GPU driver vulnerability advisory at https://www.imaginationtech.com/gpu-driver-vulnerabilities/ for patched DDK release versions; no specific fix version number was present in available intelligence data, so a patched release version cannot be independently confirmed at this time. Device vendors and OEMs integrating the Graphics DDK should engage Imagination Technologies directly for a fixed DDK build and apply it through their standard firmware/BSP update process. As a compensating control where a patched DDK cannot be immediately deployed, restrict the attack surface by hardening REE kernel access controls - preventing unprivileged local escalation to kernel context reduces the attacker's ability to reach the prerequisite 'REE kernel control' condition. Disabling GPU hardware features that trigger the vulnerable firmware data-save/restore path (if operationally feasible) may also reduce exposure, but this carries significant functional trade-offs for graphics-dependent workloads. Monitoring for unexpected kernel privilege escalations on affected platforms is advisable as a detection measure.
More in Graphics Ddk
View allMemory corruption and information disclosure in Imagination Graphics DDK allows remote unauthenticated attackers to expl
Out-of-bounds write in the Imagination Technologies Graphics DDK (GPU user-space driver) can be triggered when a victim
GPU shader compiler memory corruption via malicious shader code allows remote code execution when the compiler runs with
Out-of-bounds kernel write in Imagination Technologies Graphics DDK (PowerVR GPU driver) allows a local non-privileged p
Out-of-bounds kernel memory read/write in Imagination Technologies Graphics DDK (the driver kit for PowerVR GPUs) allows
Local memory-corruption escalation in Imagination Technologies' Graphics DDK (the PowerVR GPU driver stack) lets an unpr
Local privilege escalation in Imagination Technologies' Graphics DDK (PowerVR GPU driver) lets a non-privileged user tri
Privilege escalation in Imagination Technologies Graphics DDK allows guest VM kernel software to issue crafted commands
Privilege escalation in Imagination Technologies' Graphics DDK GPU driver allows kernel-level software inside a Host VM
Kernel heap corruption in Imagination Technologies Graphics DDK enables local privilege escalation from a non-privileged
Privilege escalation in Imagination Technologies Graphics DDK allows a malicious guest VM with GPU access to send crafte
Out-of-bounds write in Imagination Technologies Graphics DDK allows a malicious guest VM to issue improper GPU commands
Same weakness CWE-822 – Untrusted Pointer Dereference
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today