CVE-2026-21732 PUBLISHED

GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation

Assigner: imaginationtech
Reserved: 05.01.2026 Published: 20.03.2026 Updated: 20.03.2026

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.

An edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access.

Product Status

Vendor Imagination Technologies
Product Graphics DDK
Versions Default: unknown
  • Version 1.17 RTM is unaffected
  • Version 1.18 RTM is unaffected
  • Version 23.2 RTM is affected
  • affected from 24.1 RTM to 25.1 RTM (incl.)
  • Version 25.2 RTM is unaffected

References

Problem Types

  • CWE-823: Use of Out-of-range Pointer Offset (4.16) CWE

Impacts

  • CAPEC-113: Interface Manipulation (Version 3.9)