Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory.
This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.
This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Imagination Technologies | Graphics DDK | unknown |
|
No data.
No data.
No data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.imaginationtech.com/gpu-driver-vulnerabilities/ |
|
History
Mon, 09 Mar 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This is caused by improper handling of the memory protections for the user-mode wrapped memory resource. | |
| Title | GPU DDK - Insufficient permission check in PhysmemWrapExtMem() when write attribute support enabled | |
| Weaknesses | CWE-280 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: imaginationtech
Published:
Updated: 2026-03-09T12:23:38.659Z
Reserved: 2026-01-05T11:57:27.258Z
Link: CVE-2026-21736
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-03-09T13:15:56.120
Modified: 2026-03-09T13:35:07.393
Link: CVE-2026-21736
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses