Vulnerability in Imagination Technologies Graphics DDK

[ Description ]Official description

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR3 Nov 2026CERTFR-2026-AVI-1443

  Multiple vulnerabilities in Google Android Translated from French

  Multiple vulnerabilities have been discovered in Google Android. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

  CVE-2026-20546CVE-2026-58990CVE-2026-20548+213 more CVEs
• BSI CERT-Bund2 Nov 2026WID-SEC-2026-4288

  Android Patchday November 2026 (Google Android, Automotive OS and XR): Multiple vulnerabilities Translated from German

  Risk highCVE-2026-45201CVE-2026-20561CVE-2026-58956+222 more CVEs

[ References ]References

• www.imaginationtech.com/gpu-driver-vulnerabilities