Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74915

GPU DDK - OOB write in UntwiddlePOTSquare64bpp

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Imagination Technologies Graphics DDK

Default version status: unknown

  • 1.18 RTM2affected
  • 23.2 RTM2affected
  • 24.2 RTM2affected
  • 25.1 RTM2 to ≤ 25.3 RTMaffected
  • 26.1 RTM2affected
  • 26.2 RTMaffected
  • 26.3 RTMunaffected

References