CVE-2026-41154
GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse
CVSS Score
7.8
EPSS Score
0.2%
EPSS Percentile
6th
Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads to OOB access.
| CWE | CWE-787 |
| Vendor | imagination technologies |
| Product | graphics ddk |
| Published | Jul 10, 2026 |
| Last Updated | Jul 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for imagination technologies graphics ddk
Be the first to know when new high vulnerabilities affecting imagination technologies graphics ddk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Imagination Technologies / Graphics DDK
24.2 RTM2 25.1 RTM2 ≤ 25.3 RTM 26.1 RTM1