Buffer overflow in Imaginationtech Ddk
CVE-2026-21732
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privi…
EPSS: 0.003 (20.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Imaginationtech Ddk — versions 1.17, 1.18, 23.2
- Imagination Technologies Graphics Ddk — versions 1.17 RTM, 1.18 RTM, 23.2 RTM
Weakness classification (CWE)
References
- 367425dc-4d06-4041-9650-c2dc6aaa27ce (Vendor Advisory)
Frequently asked questions
- What is CVE-2026-21732?
- CVE-2026-21732 is a critical-severity vulnerability in Imaginationtech Ddk, classified under CWE-823. CVSS score: 9.6/10. Published 2026-03-20.
- How severe is CVE-2026-21732?
- Critical severity. CVSS v3 base score is 9.6 out of 10.