CVE-2026-22165 PUBLISHED

GPU DDK - UAF read of GLES3Context::psDrawParams and GLES3Context::psMode and UAF read/write of RMJob::apsCCBs

Assigner: imaginationtech
Reserved: 06.01.2026 Published: 01.05.2026 Updated: 01.05.2026

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

Product Status

Vendor Imagination Technologies
Product Graphics DDK
Versions Default: unknown
  • Version 1.18 RTM is affected
  • Version 23.2 RTM is affected
  • affected from 24.1 RTM to 24.2 RTM (incl.)
  • affected from 25.1 RTM to 25.3 RTM (incl.)
  • Version 26.1 RTM is unaffected

References

Problem Types

  • CWE-416: Use After Free CWE

Impacts

  • CAPEC-124: Shared Resource Manipulation (Version 3.9)