CVE-2026-7639 GPU DDK - Page UAF read in PMMETA_PROTECT heap memory

What is CVE-2026-7639?

CVE-2026-7639 is a high-severity use after free vulnerability in Imagination Technologies Graphics DDK, published on 10 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code.

Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete cleanup of an internal driver state, allowing for future unauthorized access to the contents of the physical memory.

Weakness: CWE-459

Which versions are affected by CVE-2026-7639?

It affects 1 product.

Products include Imaginationtech Ddk.

How do I fix CVE-2026-7639?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2026-7639 being exploited?

There is no known exploitation of CVE-2026-7639 in the wild and no public exploit code.

Other vulnerabilities in Imagination Technologies Graphics DDK

• CVE-2026-16280 GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset Critical 9.8
• CVE-2025-13952 GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP Critical 9.8
• CVE-2026-21732 GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation Critical 9.6
• CVE-2025-25176 GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world Critical 9.1
• CVE-2025-58411 GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as A-505486043, ASB-A-505486043, GHSA-q4g7-pm99-9f7g.