CVE-2026-41157: Imagination Technologies Graphics DDK, грешка в

Описание

Оригинално описание

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. The software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination.

Засегнати продукти

• Imagination Technologies Graphics DDK: 1.18 RTM; 23.2 RTM; 24.2 RTM; 25.1 RTM до 25.3 RTM; 26.1 RTM; 26.2 RTM

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в Imagination Technologies Graphics DDK

• CVE-2026-74915
• CVE-2026-74912
• CVE-2026-19199
• CVE-2026-18629
• CVE-2026-65587

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-41157
• https://nvd.nist.gov/vuln/detail/CVE-2026-41157
• https://www.imaginationtech.com/gpu-driver-vulnerabilities/