CVE-2026-65584

GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo

State
Published
Severity
Not scored
Published
Oct 30, 2026
Updated
Oct 30, 2026
Reserved
Jul 22, 2026

Read the record on cve.org

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful exploitation can cause kernel memory corruption and typically results in a denial-of-service condition through a kernel crash.

The code vulnerability is a buffer write beyond the allocated array on the stack caused by copying excessive data from an internal buffer.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
Graphics DDKImagination Technologies
  • 1.18 RTM2Affected
  • 23.2 RTM2Affected
  • 24.2 RTM2Affected
  • 25.1 RTM2 through 25.3 RTMAffected
  • 26.1 RTM2Affected
  • 26.2 RTMNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.