CVE-2026-21736

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.

PUBLISHED Reserved 2026-01-05 | Published 2026-03-09 | Updated 2026-03-09 | Assigner imaginationtech

Problem types

CWE-280: Improper Handling of Insufficient Permissions or Privileges

Product status

References

www.imaginationtech.com/gpu-driver-vulnerabilities/

cve.org (CVE-2026-21736)

nvd.nist.gov (CVE-2026-21736)

Download JSON