Use After Free Vulnerability in Imagination Technologies GPU Driver

CVE-2026-7639

What is CVE-2026-7639?

A security vulnerability exists in Imagination Technologies GPU Driver that permits a sequence of improper GPU system calls by software running as a non-privileged user. This flaw can result in a use after free condition, enabling unauthorized memory access via shader code. The vulnerability allows malicious code to trigger issues in the MMU mapping logic, which may lead to incomplete cleanup of the driver's internal state, creating opportunities for unprivileged access to sensitive physical memory contents.

References