Vulnerability Details CVE-2026-16280
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 21.9%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-16280
-
cpe:2.3:a:imaginationtech:ddk:-
-
cpe:2.3:a:imaginationtech:ddk:1.15
-
cpe:2.3:a:imaginationtech:ddk:1.17
-
cpe:2.3:a:imaginationtech:ddk:1.18
-
cpe:2.3:a:imaginationtech:ddk:23.2
-
cpe:2.3:a:imaginationtech:ddk:23.3
-
cpe:2.3:a:imaginationtech:ddk:24.1
-
cpe:2.3:a:imaginationtech:ddk:24.2
-
cpe:2.3:a:imaginationtech:ddk:24.3
-
cpe:2.3:a:imaginationtech:ddk:25.1
-
cpe:2.3:a:imaginationtech:ddk:25.2
-
cpe:2.3:a:imaginationtech:ddk:25.3
-
cpe:2.3:a:imaginationtech:ddk:26.1
-
cpe:2.3:o:google:android:-
-
cpe:2.3:o:linux:linux_kernel:-