Vulnerability Description
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Imaginationtech | Ddk | >= 24.1, <= 25.1 |
Related Weaknesses (CWE)
References
- https://www.imaginationtech.com/gpu-driver-vulnerabilities/Vendor Advisory
FAQ
What is CVE-2026-21732?
CVE-2026-21732 is a vulnerability with a CVSS score of 9.6 (CRITICAL). A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, whe...
How severe is CVE-2026-21732?
CVE-2026-21732 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-21732?
Check the references section above for vendor advisories and patch information. Affected products include: Imaginationtech Ddk.