Imagination Technologies vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-45200 Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause douHigh 7.8 · Sep 3, 2026
• CVE-2026-45201 Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading High 7.8 · Aug 21, 2026
• CVE-2026-45199 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualiseHigh 7.8 · Aug 21, 2026
• CVE-2026-49746 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU High 7.1 · Aug 6, 2026
• CVE-2026-45198 Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from nHigh 7.8 · Aug 6, 2026
• CVE-2026-16280 An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB.Critical 9.8 · Jul 24, 2026
• CVE-2026-49745 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualiseHigh 7.8 · Jul 24, 2026
• CVE-2026-49744 Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualiseHigh 7.8 · Jul 24, 2026
• CVE-2026-49743 Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, High 7.8 · Jul 24, 2026
• CVE-2026-7639 Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprHigh 7.8 · Jul 10, 2026
• CVE-2026-45203 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of mHigh 7.8 · Jul 10, 2026
• CVE-2026-45196 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privileHigh 7.8 · Jul 10, 2026
• CVE-2026-41154 Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls.High 7.8 · Jul 10, 2026
• CVE-2026-34196 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the High 7.8 · Jul 10, 2026
• CVE-2026-45195 Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted raHigh 7.8 · Jun 26, 2026
• CVE-2026-21734 A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader comHigh 7.7 · Jun 26, 2026
• CVE-2026-41156 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources creating a write use after free scHigh 7.7 · Jun 19, 2026
• CVE-2026-34192 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables.High 7.7 · Jun 19, 2026
• CVE-2026-41158 Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages.High 7.8 · Jun 12, 2026
• CVE-2026-41157 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leadCritical 9.8 · Jun 12, 2026
• CVE-2026-34195 Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel.High 8.8 · Jun 12, 2026
• CVE-2026-34194 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memoHigh 7.1 · Jun 8, 2026
• CVE-2026-22164 Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.High 7.5 · Jun 8, 2026
• CVE-2026-22167 Software installed and run as a non-privileged user may conduct improper GPU system calls to force GPU to write to arbitrary physical memory pages.High 7.8 · May 1, 2026
• CVE-2026-22166 A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared librarHigh 8.1 · May 1, 2026