Integer Overflow Vulnerability in Imagination Technologies GPU Driver

CVE-2026-16280

What is CVE-2026-16280?

An integer overflow vulnerability exists in the calculation of physical offsets for sparse PMRs within the Imagination Technologies GPU driver. This flaw may occur when dealing with PMRs exceeding 4 GB in size, resulting in 32-bit truncation of address computations. Consequently, this can lead to incorrect mappings by the GPU MMU, potentially allowing non-privileged users to access unintended physical memory, thereby risking memory corruption and information disclosure.

References