CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41154

Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls. When indexing pages larger than 4kB in the page freeing logic of the sparse memory implementation, incorrect buffer indexing leads to OOB access.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 3.1%

CVSS Severity

CVSS v3 Score 7.8

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Products affected by CVE-2026-41154

Imaginationtech » Ddk » Version: N/A

cpe:2.3:a:imaginationtech:ddk:-
Imaginationtech » Ddk » Version: 1.15

cpe:2.3:a:imaginationtech:ddk:1.15
Imaginationtech » Ddk » Version: 1.17

cpe:2.3:a:imaginationtech:ddk:1.17
Imaginationtech » Ddk » Version: 1.18

cpe:2.3:a:imaginationtech:ddk:1.18
Imaginationtech » Ddk » Version: 23.2

cpe:2.3:a:imaginationtech:ddk:23.2
Imaginationtech » Ddk » Version: 23.3

cpe:2.3:a:imaginationtech:ddk:23.3
Imaginationtech » Ddk » Version: 24.1

cpe:2.3:a:imaginationtech:ddk:24.1
Imaginationtech » Ddk » Version: 24.2

cpe:2.3:a:imaginationtech:ddk:24.2
Imaginationtech » Ddk » Version: 24.3

cpe:2.3:a:imaginationtech:ddk:24.3
Imaginationtech » Ddk » Version: 25.1

cpe:2.3:a:imaginationtech:ddk:25.1
Imaginationtech » Ddk » Version: 25.2

cpe:2.3:a:imaginationtech:ddk:25.2
Imaginationtech » Ddk » Version: 25.3

cpe:2.3:a:imaginationtech:ddk:25.3
Imaginationtech » Ddk » Version: 26.1

cpe:2.3:a:imaginationtech:ddk:26.1
Google » Android » Version: N/A

cpe:2.3:o:google:android:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41154

Products

Pricing

Contact Us