Memory Allocation Vulnerability in Imagination Technologies GPU Driver

CVE-2026-19199

What is CVE-2026-19199?

A vulnerability in the Imagination Technologies GPU driver permits improper system calls executed by non-privileged users, leading to a 32-bit integer overflow during the conversion of allocation sizes from pages to bytes. This flaw results in an undersized kernel buffer allocation, possibly allowing attackers to map unallocated or previously allocated physical pages to a user-controlled GPU MMU context. Consequently, this may lead to the exposure of sensitive kernel data, posing a significant risk to system security.

References