EUVD-2026-113478 flaw reported in Imagination Graphics DDK (no score listed)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Imagination Technologies
- Product
- Graphics DDK
- First seen
Summary
The EUVD entry says a non-privileged user can make improper GPU system calls that free memory still in use and reallocate it, potentially enabling arbitrary memory reads or writes to physical memory. No CVSS score is listed in the entry.
If you use Imagination Technologies
Check whether your devices use the affected Imagination Graphics DDK
Install vendor driver or firmware updates when available
Limit untrusted local code execution on affected systems
Install browser and GPU driver updates when available
Avoid visiting untrusted sites while the flaw is unpatched
Check Imagination's advisory for affected Graphics DDK versions
What the sources say 8
· Mastodon: “A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash....” Source
· Mastodon: “Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF.” Source
· Mastodon: “Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel.” Source
· Mastodon: “Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical me...” Source
· Mastodon: “A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library.” Source
· Mastodon: “On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.” Source
· Mastodon: “Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory.” Source
· Mastodon: “A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure.” Source