by Kastro
Paper/Archive/CVE-2026-16280

CVE-2026-16280

Imagination Technologies Graphics DDK — GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.9.449 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.

Affected

ProductAffectedFixed inSource
Graphics DDK1.18 RTM2–CNA
Graphics DDK23.2 RTM2–CNA
Graphics DDK24.2 RTM2–CNA
Graphics DDK25.1 RTM2 – 25.3 RTM–CNA
Graphics DDK26.1 RTM126.1 RTM2CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refimaginationtech.com/gpu-driver-vulnerabilities