Use After Free in Imagination Technologies Graphics Ddk
CVE-2026-15466
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF. The race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory.
Vulnerability class: Use-After-Free
Published .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Imagination Technologies Graphics Ddk — versions 26.1 RTM1, 26.1 RTM2, 24.2 RTM2