CVE-2026-65587

GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change

State: Published
Severity: Not scored
Published: Oct 30, 2026
Updated: Oct 30, 2026
Reserved: Jul 22, 2026

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.

The software writes data past the end of an intended memory offset. Writing outside the bounds of allocated memory can corrupt adjacent memory, crash the process, or cause undefined behaviour.

Scores

The record has no CVSS score.

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Graphics DDKImagination Technologies	1.18 RTM2Affected 23.2 RTM2Affected 24.2 RTM2Affected 25.1 RTM2 through 25.3 RTMAffected 26.1 RTM1Affected 26.2 RTMNot affected

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.