DD
Product
Ddk
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 27Medium 8Low 1
Watch
Add Ddk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4969 | 6.5 | Jan 16 | A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures Affected: through 23.2 |
| CVE-2025-58408 | 5.9 | Dec 1 | GPU DDK - KASAN Read UAF in the PVRSRVBridgeRGXSubmitTransfer2 due to improper error handling code Affected: through 25.2 |
| CVE-2025-46710 | 5.7 | Jun 16 | Possible kernel exceptions caused by reading and writing kernel heap data after free Affected: 1.15 before 24.2; 24.2; 24.2; 24.2 |
| CVE-2025-46711 | 5.5 | Sep 22 | GPU DDK - NULL Pointer dereference occurs in LockHandle on bridge entry when connection misused Affected: 1.17 through 25.1 |
| CVE-2025-46707 | 5.2 | Jun 27 | GPU DDK - Guest VM can override its own FW VZ connection state after the FW has close it Affected: 23.2 before 24.1; 1.15; 1.17; 1.18 |
| CVE-2026-21736 | 4.4 | Mar 9 | GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled Affected: 25.1; 25.1 |
| CVE-2026-34193 | 4.3 | Jun 1 | GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr() Affected: before 26.1; 26.1 |
| CVE-2025-46708 | 4.3 | Jun 27 | GPU DDK - Guest VM can delay the FW and GPU from processing workloads from other VMs Affected: 23.2 before 24.2; 1.15; 1.17; 1.18 |
Showing 8