CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-16280

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 21.9%

CVSS Severity

CVSS v3 Score 9.8

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Products affected by CVE-2026-16280

Imaginationtech » Ddk » Version: N/A

cpe:2.3:a:imaginationtech:ddk:-
Imaginationtech » Ddk » Version: 1.15

cpe:2.3:a:imaginationtech:ddk:1.15
Imaginationtech » Ddk » Version: 1.17

cpe:2.3:a:imaginationtech:ddk:1.17
Imaginationtech » Ddk » Version: 1.18

cpe:2.3:a:imaginationtech:ddk:1.18
Imaginationtech » Ddk » Version: 23.2

cpe:2.3:a:imaginationtech:ddk:23.2
Imaginationtech » Ddk » Version: 23.3

cpe:2.3:a:imaginationtech:ddk:23.3
Imaginationtech » Ddk » Version: 24.1

cpe:2.3:a:imaginationtech:ddk:24.1
Imaginationtech » Ddk » Version: 24.2

cpe:2.3:a:imaginationtech:ddk:24.2
Imaginationtech » Ddk » Version: 24.3

cpe:2.3:a:imaginationtech:ddk:24.3
Imaginationtech » Ddk » Version: 25.1

cpe:2.3:a:imaginationtech:ddk:25.1
Imaginationtech » Ddk » Version: 25.2

cpe:2.3:a:imaginationtech:ddk:25.2
Imaginationtech » Ddk » Version: 25.3

cpe:2.3:a:imaginationtech:ddk:25.3
Imaginationtech » Ddk » Version: 26.1

cpe:2.3:a:imaginationtech:ddk:26.1
Google » Android » Version: N/A

cpe:2.3:o:google:android:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-16280

Products

Pricing

Contact Us