CVE-2026-65586: Imagination Technologies Graphics DDK, грешка в

Описание

Оригинално описание

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).

Засегнати продукти

• Imagination Technologies Graphics DDK: 1.18 RTM2; 23.2 RTM2; 24.2 RTM2; 25.1 RTM2 до 25.3 RTM; 26.1 RTM2; 26.2 RTM

Вид слабост

• CWE-416 Използване на памет след освобождаване (Use-After-Free)

История

Други уязвимости в Imagination Technologies Graphics DDK

• CVE-2026-74915
• CVE-2026-74912
• CVE-2026-19199
• CVE-2026-18629
• CVE-2026-65587

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-65586
• https://nvd.nist.gov/vuln/detail/CVE-2026-65586
• https://www.imaginationtech.com/gpu-driver-vulnerabilities/