CVE-2026-34196: GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem
Published Jul 10, 2026
·Updated
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the second mapping
The second virtual mapping references a physical address that has been freed after the first virtual mapping has been freed. This allows the physical memory to be allocated (for example) by another process and read/written to.
Affected Software
4 affected components
All of the following
Any of the following
Imaginationtech Ddk<26.1
Imaginationtech Ddk=26.1-rtm1
Any of the following
Google Android
Linux Linux kernel
Event History
Jul 10, 2026
CVE Published
via MITRE·08:42 PM
Data Sourced
via MITRE·08:42 PM
DescriptionWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Jul 16, 2026
Data Sourced
12:00 AM
SeverityWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-46242
- CVE-2026-49746
- CVE-2026-45204
- CVE-2026-49745
- CVE-2026-7639
- CVE-2026-13855
- CVE-2026-14432
- CVE-2026-14431
- CVE-2026-13854
- CVE-2026-13853
- CVE-2026-14429
- CVE-2026-14427
- CVE-2026-14156
- CVE-2026-14155
- CVE-2026-14024
- CVE-2026-14426
- CVE-2026-14023
- CVE-2026-13786
- CVE-2026-14425
- CVE-2026-14022
- CVE-2026-14154
- CVE-2026-14021
- CVE-2026-14153
- CVE-2026-14020
- CVE-2026-14152
- CVE-2026-14423
- CVE-2026-14019
- CVE-2026-14151
- CVE-2026-14150
- CVE-2026-13848
- CVE-2026-14017
- CVE-2026-14016
- CVE-2026-14014
- CVE-2026-14013
- CVE-2026-14012
- CVE-2026-14421
- CVE-2026-14420
- CVE-2026-14419
- CVE-2026-13784
- CVE-2026-13783
- CVE-2026-14011
- CVE-2026-13845
- CVE-2026-13842
- CVE-2026-14418
- CVE-2026-14009
- CVE-2026-14008
- CVE-2026-13782
- CVE-2026-14417
- CVE-2026-13781
- CVE-2026-14007
- CVE-2026-13841
- CVE-2026-14416
- CVE-2026-14148
- CVE-2026-14149
- CVE-2026-14006
- CVE-2026-14415
- CVE-2026-13780
- CVE-2026-14147
- CVE-2026-13840
- CVE-2026-14146
- CVE-2026-14004
- CVE-2026-14003
- CVE-2026-14002
- CVE-2026-14145
- CVE-2026-14001
- CVE-2026-14000
- CVE-2026-13839
- CVE-2026-13838
- CVE-2026-13837
- CVE-2026-13836
- CVE-2026-13835
- CVE-2026-14144
- CVE-2026-14142
- CVE-2026-14139
- CVE-2026-13999
- CVE-2026-13996
- CVE-2026-13993
- CVE-2026-14135
- CVE-2026-13989
- CVE-2026-13988
- CVE-2026-14133
- CVE-2026-14132
- CVE-2026-14131
- CVE-2026-13986
- CVE-2026-14130
- CVE-2026-13985
- CVE-2026-14127
- CVE-2026-13984
- CVE-2026-13982
- CVE-2026-13979
- CVE-2026-14414
- CVE-2026-13834
- CVE-2026-14413
- CVE-2026-14412
- CVE-2026-14411
- CVE-2026-14125
- CVE-2026-13978
- CVE-2026-13977
- CVE-2026-13976
- CVE-2026-14408
- CVE-2026-14410
- CVE-2026-14409
- CVE-2026-13973
- CVE-2026-13832
- CVE-2026-13972
- CVE-2026-14121
- CVE-2026-13831
- CVE-2026-13971
- CVE-2026-13970
- CVE-2026-14120
- CVE-2026-14118
- CVE-2026-13968
- CVE-2026-13967
- CVE-2026-14116
- CVE-2026-14115
- CVE-2026-13966
- CVE-2026-13965
- CVE-2026-13963
- CVE-2026-13830
- CVE-2026-13962
- CVE-2026-13960
- CVE-2026-14112
- CVE-2026-14111
- CVE-2026-14110
- CVE-2026-14109
- CVE-2026-14108
- CVE-2026-13959
- CVE-2026-14407
- CVE-2026-13957
- CVE-2026-14107
- CVE-2026-14105
- CVE-2026-13956
- CVE-2026-13954
- CVE-2026-14104
- CVE-2026-14103
- CVE-2026-13953
- CVE-2026-14102
- CVE-2026-14406
- CVE-2026-13952
- CVE-2026-13828
- CVE-2026-13951
- CVE-2026-14100
- CVE-2026-14098
- CVE-2026-14405
- CVE-2026-13950
- CVE-2026-14404
- CVE-2026-14403
- CVE-2026-13948
- CVE-2026-14095
- CVE-2026-14093
- CVE-2026-13945
- CVE-2026-13779
- CVE-2026-14092
- CVE-2026-14091
- CVE-2026-14090
- CVE-2026-14089
- CVE-2026-13942
- CVE-2026-13824
- CVE-2026-14086
- CVE-2026-13823
- CVE-2026-13940
- CVE-2026-14085
- CVE-2026-13938
- CVE-2026-13821
- CVE-2026-14084
- CVE-2026-14083
- CVE-2026-14401
- CVE-2026-14082
- CVE-2026-13937
- CVE-2026-14081
- CVE-2026-13776
- CVE-2026-13935
- CVE-2026-13934
- CVE-2026-14399
- CVE-2026-13933
- CVE-2026-14398
- CVE-2026-13820
- CVE-2026-14079
- CVE-2026-14078
- CVE-2026-13930
- CVE-2026-13928
- CVE-2026-13818
- CVE-2026-14076
- CVE-2026-13775
- CVE-2026-13922
- CVE-2026-13817
- CVE-2026-13921
- CVE-2026-13815
- CVE-2026-13814
- CVE-2026-14395
- CVE-2026-14394
- CVE-2026-14393
- CVE-2026-13919
- CVE-2026-13793
- CVE-2026-14026
- CVE-2026-14072
- CVE-2026-13911
- CVE-2026-14073
- CVE-2026-13858
- CVE-2026-13774
- CVE-2026-13811
- CVE-2026-14071
- CVE-2026-13909
- CVE-2026-14070
- CVE-2026-14069
- CVE-2026-13906
- CVE-2026-13810
- CVE-2026-13903
- CVE-2026-14065
- CVE-2026-13901
- CVE-2026-13806
- CVE-2026-14390
- CVE-2026-14063
- CVE-2026-14062
- CVE-2026-14061
- CVE-2026-13900
- CVE-2026-14059
- CVE-2026-14058
- CVE-2026-14057
- CVE-2026-13899
- CVE-2026-13898
- CVE-2026-14056
- CVE-2026-13897
- CVE-2026-13804
- CVE-2026-14054
- CVE-2026-14053
- CVE-2026-13896
- CVE-2026-14052
- CVE-2026-13895
- CVE-2026-13894
- CVE-2026-13893
- CVE-2026-14050
- CVE-2026-14049
- CVE-2026-13891
- CVE-2026-13802
- CVE-2026-13890
- CVE-2026-13801
- CVE-2026-13888
- CVE-2026-14389
- CVE-2026-14388
- CVE-2026-13886
- CVE-2026-14387
- CVE-2026-13884
- CVE-2026-13883
- CVE-2026-13799
- CVE-2026-14048
- CVE-2026-13882
- CVE-2026-13881
- CVE-2026-13798
- CVE-2026-13797
- CVE-2026-13879
- CVE-2026-14047
- CVE-2026-13877
- CVE-2026-13876
- CVE-2026-13874
- CVE-2026-13873
- CVE-2026-13871
- CVE-2026-14045
- CVE-2026-14044
- CVE-2026-14043
- CVE-2026-14042
- CVE-2026-14041
- CVE-2026-14040
- CVE-2026-14039
- CVE-2026-13867
- CVE-2026-14038
- CVE-2026-13865
- CVE-2026-14037
- CVE-2026-14036
- CVE-2026-13864
- CVE-2026-14035
- CVE-2026-14031
- CVE-2026-13861
- CVE-2026-14383
- CVE-2026-13796
- CVE-2026-14030
- CVE-2026-13857
- CVE-2026-13790
- CVE-2026-13860
- CVE-2026-15132
- CVE-2026-15133
- CVE-2026-15131
- CVE-2026-15130
- CVE-2026-15129
- CVE-2026-15128
- CVE-2026-15127
- CVE-2026-15126
- CVE-2026-15125
- CVE-2026-15124
- CVE-2026-15123
- CVE-2026-15121
- CVE-2026-15119
- CVE-2026-15118
- CVE-2026-15117
- CVE-2026-15116
- CVE-2026-15114
- CVE-2026-15112
- CVE-2026-15111
- CVE-2026-15109
- CVE-2026-15108
- CVE-2026-15107
- CVE-2026-15777
- CVE-2026-15776
- CVE-2026-15775
- CVE-2026-15774
- CVE-2026-15772
- CVE-2026-15770
- CVE-2026-15769
- CVE-2026-15765
- CVE-2026-15768
- CVE-2026-15764
- CVE-2026-15767
- CVE-2026-15766
- CVE-2026-15778
Frequently Asked Questions
1
What is the severity of CVE-2026-34196?
The severity of CVE-2026-34196 is high, rated at 7.8 on the CVSS scale.
2
How do I fix CVE-2026-34196?
To remediate CVE-2026-34196, update the GPU DDK to the latest version provided by the vendor.
3
What systems are affected by CVE-2026-34196?
CVE-2026-34196 affects systems using the GPU DDK that allow non-privileged users to perform GPU system calls.
4
What types of vulnerabilities are associated with CVE-2026-34196?
CVE-2026-34196 is associated with Use After Free and Integer Overflow vulnerabilities.
5
What is the impact of exploitation of CVE-2026-34196?
Exploitation of CVE-2026-34196 can lead to arbitrary read/write access to physical memory, compromising system integrity.