CVE-2026-7639EPSS p6.8%
CVE-2026-7639CVE-2026-7639
imaginationtech / ddk
Description
Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code.
Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete cleanup of an internal driver state, allowing for future unauthorized access to the contents of the physical memory.
Scoring
| CVSS | 7.8 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.18% probability of exploitation · percentile 6.8% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-12 |