CVE-2026-34194 Details
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. The product accidentally refers to the wrong memory due to the semantics of how math operations are implicitly scaled across buffers of different sizes.
A use-after-free vulnerability has been identified in the Imagination Technologies GPU Driver Development Kit (DDK) releases starting from 24.2 RTM2 up to and including 26.1 RTM1. This vulnerability allows software running as a non-privileged user to make improper GPU system calls, leading to mismanagement of memory mappings for sparse allocations. The issue arises because mathematical operations are incorrectly scaled across buffers of varying sizes, causing the product to reference incorrect memory.
The DDK kernel module has been updated to address this vulnerability by correcting the management of GPU system calls related to sparse memory allocations, ensuring that resources are properly referenced and not prematurely freed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 8, 2026CISA-ADP
Assessed Jun 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.imaginationtech.com/gpu-driver-vulnerabilities/ | imaginationtech | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-468 | Incorrect Pointer Scaling | imaginationtech |
Affected Products
| Product | Versions |
|---|---|
| Imagination Technologies GPU DDK | <= 25.2 RTM <= 25.3 RTM ~24.2 RTM2, <= 26.1 RTM1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | imaginationtech |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 8, 2026 | CVE Modified | CISA-ADP |
| Jun 8, 2026 | New CVE Received | imaginationtech |