1. Home
  2. CVE Database
  3. CVE-2026-22163
HIGH · 7.8

CVE-2026-22163

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical ...

Vulnerability Description

Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt to synchronise access to the resource.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ImaginationtechDdk>= 25.1, <= 25.3

Related Weaknesses (CWE)

CWE-820

References

FAQ

What is CVE-2026-22163?

CVE-2026-22163 is a vulnerability with a CVSS score of 7.8 (HIGH). Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical ...

How severe is CVE-2026-22163?

CVE-2026-22163 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-22163?

Check the references section above for vendor advisories and patch information. Affected products include: Imaginationtech Ddk.