CVE-2026-34196 in Graphics DDKinformação

Sumário

de MITRE • 10/07/2026

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the second mapping



The second virtual mapping references a physical address that has been freed after the first virtual mapping has been freed. This allows the physical memory to be allocated (for example) by another process and read/written to.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsável

Imaginationtech

Reservar

26/03/2026

Divulgação

10/07/2026

Moderação

aceite

Entrada

VDB-377642

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

muito baixo

Fontes

Interested in the pricing of exploits?

See the underground prices here!