Vulnerability · Published Jul 10, 2026 · Assigned by imaginationtech
CVE-2026-7639GPU DDK - Page UAF read in PMMETA_PROTECT heap memory
High 7.8
In plain English
A high-severity security flaw in Graphics DDK from Imagination Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete cleanup of an internal driver state, allowing for future unauthorized access to the contents of the physical memory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Imagination Technologies | Graphics DDK | 1.18 RTM223.2 RTM224.2 RTM225.1 RTM2 – through 25.3 RTM26.1 RTM1 |
Weakness: CWE-459 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H