High severity · published Mar 20, 2026
CVE-2026-22163
GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Requires malware code to misuse the DDK kernel module IOCTL interface.
Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages.
The product utilises a shared resource in a concurrent manner but does not attempt to synchronise access to the resource.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 0% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Graphics DDK · Imagination Technologies
1.17 RTM; 1.18 RTM; 23.2 RTM; 24.1 RTM through 24.2 RTM; 25.1 RTM through 25.3 RTM · source: vendor
DD
Ddk · Imaginationtech
25.1 through 25.3; 1.17; 1.18; 23.2; 24.1; 24.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-22163
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-22163
Vendor Advisory
https://www.imaginationtech.com/gpu-driver-vulnerabilities/
More from Graphics DDK
9.8
CVE-2026-16280
GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset
9.8
CVE-2026-41157
GPU DDK - OOB Write in CalculateNPOTTwiddleSparsePageMap3D
9.8
CVE-2025-13952
GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP
9.8
CVE-2025-6573
GPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite
9.6
CVE-2026-21732
GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation
