GD
Product
Graphics DDK
87
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 62Medium 16Low 3
Watch
Add Graphics DDK to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22164 | 7.5 | Jun 8 | GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical Affected: 24.2 RTM; 25.1 RTM through 25.3 RTM; 26.1 RTM |
| CVE-2025-58410 | 7.5 | Nov 17 | GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR Affected: 23.3 RTM through 25.1 RTM2; 25.2 RTM |
| CVE-2025-46709 | 7.5 | Aug 8 | GPU DDK - Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leak Affected: 1.15 RTM; 1.17 RTM; 1.18 RTM; 23.2 RTM through 25.1 RTM1 |
| CVE-2025-1706 | 7.5 | May 17 | GPU DDK - Improper locking when accessing the pvr_exp_fence object Affected: 24.1 RTM through 24.3 RTM |
| CVE-2025-58407 | 7.4 | Nov 17 | GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet Affected: 25.2 RTM1 |
| CVE-2026-21733 | 7.3 | Apr 17 | GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so) Affected: 1.18 RTM; 23.2 RTM; 24.1 RTM through 24.2 RTM; 25.1 RTM through 25.3 RTM |
| CVE-2024-12577 | 7.3 | Feb 22 | GPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet Affected: 1.15 RTM through 24.3 RTM |
| CVE-2026-49746 | 7.1 | Aug 7 | GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem Affected: 1.18 RTM2; 23.2 RTM2; 24.2 RTM2; 25.1 RTM2 through 25.3 RTM; 26.1 RTM1 |
| CVE-2026-34194 | 7.1 | Jun 8 | GPU DDK - UAF read and/or write to arbitrary physical pages in DevmemIntChangeSparse due to incorrect calculation of the virtual index count Affected: 24.2 RTM; 25.1 RTM through 25.3 RTM; 26.1 RTM |
| CVE-2025-0468 | 7.1 | Apr 4 | GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA) Affected: 1.15 RTM through 24.3 RTM |
| CVE-2024-47895 | 7.1 | Jan 13 | GPU DDK - OOB read into fwlog due to unchecked block count Affected: 1.15 RTM through 24.2 RTM2 |
| CVE-2024-47894 | 7.1 | Jan 13 | GPU DDK - Out of bounds read into fwlog due to unchecked loop bounds Affected: 1.15 RTM through 24.2 RTM2 |