CVE-2026-22166

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system.

PUBLISHED Reserved 2026-01-06 | Published 2026-05-01 | Updated 2026-05-01 | Assigner imaginationtech

Problem types

CWE-416: Use After Free

Product status

References

www.imaginationtech.com/gpu-driver-vulnerabilities/

cve.org (CVE-2026-22166)

nvd.nist.gov (CVE-2026-22166)

Download JSON