HIGH🇬🇧 English

CVE-2026-21734

CVSS 7.7v3.1pub. 2026-06-26upd. 2026-06-29

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
  • Imaginationtech Ddk

    APP
    Imaginationtech
    25.3≤ 25.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2026-21732CRITICAL9.6PL ✓ten sam produkt

Out-of-bounds write w kompilatorze GPU shader Imagination Technologies DDK

CVE-2025-13952CRITICAL9.8PL ✓ten sam produkt

Use-after-free w kompilatorze shaderów GPU biblioteki Imagination DDK

CVE-2025-25176CRITICAL9.1PL ✓ten sam produkt

Wyciek rejestrów bezpiecznych obciążeń przez środowisko niezabezpieczone — Imagination DDK

CVE-2026-45195HIGH7.8ten sam produkt

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigg...

CVE-2026-22165HIGH8.1ten sam produkt

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a writ...