Memory Allocation Vulnerability in GPU Compiler for Imagination Technologies Products
CVE-2026-18629

Currently unrated

Key Information:

Vendor
CVE Published:
30 October 2026

What is CVE-2026-18629?

A vulnerability exists within the Imagination Technologies GPU compiler that can result from improperly handled memory allocation failures caused by integer overflows derived from shader code. When a web page containing unusual GPU shader code is processed, it may lead to incorrect memory size calculations. If these failures are not managed correctly, they can result in dereferencing NULL pointers, ultimately crashing the compiler process. In instances where the compiler has system privileges, this vulnerability could open pathways for further exploitation, making it crucial to address this issue to maintain system integrity.

Affected Version(s)

Graphics DDK Linux 23.2 RTM2

Graphics DDK Linux 24.2 RTM2

Graphics DDK Linux 25.1 RTM2 <= 25.3 RTM

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.