Vulnerability · Published Oct 30, 2026 · Assigned by imaginationtech
CVE-2026-19199GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet
High 7.1
In plain English
A high-severity integer overflow in Graphics DDK from Imagination Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-bit integer overflow in the KM driver during page-to-byte conversion of an allocation size can result in an undersized kernel buffer allocation. This may allow unallocated or previously allocated physical pages to be mapped into an attacker-controlled GPU MMU context, leading to disclosure of sensitive kernel data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Imagination Technologies | Graphics DDK | 1.18 RTM223.2 RTM224.2 RTM225.1 RTM2 – through 25.3 RTM26.1 RTM2 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H