CVE-2026-34196 GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem

High 7.8 Published 10 Jul 2026 Updated 13 Jul 2026

A local attacker can exploit an integer overflow in the GPU driver to achieve use-after-free, enabling arbitrary physical memory read/write and privilege escalation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-34196?

CVE-2026-34196 is a high-severity use after free vulnerability in Imagination Technologies Graphics DDK, published on 10 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address. One of these virutal mappings can be freed along with the physical page, allowing for a read/write UAF via the second mapping

The second virtual mapping references a physical address that has been freed after the first virtual mapping has been freed. This allows the physical memory to be allocated (for example) by another process and read/written to.

Weakness: CWE-416

Which versions are affected by CVE-2026-34196?

It affects 1 product.

Products include Imaginationtech Ddk.

How do I fix CVE-2026-34196?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2026-34196 being exploited?

There is no known exploitation of CVE-2026-34196 in the wild and no public exploit code.

Sources

Also known as A-508272002, ASB-A-508272002, GHSA-54wp-4fgx-pxg4.