CVE-2026-65586
GPU DDK - Write UAF due to missing cleanup reference for abort command submitted via PVRSRVRGXKickTA3DKM
- State
- Published
- Severity
- Not scored
- Published
- Oct 30, 2026
- Updated
- Oct 30, 2026
- Reserved
- Jul 22, 2026
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages.
A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).
Scores
The record has no CVSS score.
Weaknesses
- CWE-416 Use After Free
Affected Products
| Product | Versions |
|---|---|
Graphics DDKImagination Technologies |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.