Back to overview

CVE-2026-16280

Description
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.

Metadata

CVE ID
CVE-2026-16280
State
PUBLISHED
Assigner
imaginationtech
Reserved
2026-07-20 10:54 UTC
Published
2026-07-24 22:02 UTC
Last updated
2026-07-24 22:02 UTC
Primary CWE
CWE-190
CWE-190: Integer Overflow or Wraparound
Vendor / Product
Imagination Technologies / Graphics DDK
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
Imagination Technologies Graphics DDK Linux,Android 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 ≤ 25.3 RTM …
Weakness (CWE)
CWESourceDescription
CWE-190 cna CWE-190: Integer Overflow or Wraparound
References (1)
Back to overview