CVE-2026-21732

{"id": "CVE-2026-21732", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "published": "2026-03-20T23:16:42.480", "references": [{"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "tags": ["Vendor Advisory"], "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", "description": [{"lang": "en", "value": "CWE-823"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\n\n\nAn edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access."}, {"lang": "es", "value": "Una p\u00e1gina web que contiene c\u00f3digo de sombreador de GPU inusual se carga en el proceso del compilador de GPU y puede desencadenar un fallo por escritura fuera de l\u00edmites en la biblioteca del compilador de sombreadores de GPU. En ciertas plataformas, cuando el proceso del compilador tiene privilegios de sistema, esto podr\u00eda permitir explotaciones adicionales en el dispositivo.\n\nUn caso l\u00edmite que utiliza un valor muy grande en sentencias switch en el c\u00f3digo de sombreador de GPU puede causar un fallo de segmentaci\u00f3n en el compilador de sombreadores de GPU debido a un acceso de escritura fuera de l\u00edmites."}], "lastModified": "2026-04-21T16:55:05.810", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A62602A5-EBBC-4F29-9D12-311AD0626512", "versionEndIncluding": "25.1", "versionStartIncluding": "24.1"}, {"criteria": "cpe:2.3:a:imaginationtech:ddk:1.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C2A0AE6-35B7-4221-8E49-6CF3AD9B3927"}, {"criteria": "cpe:2.3:a:imaginationtech:ddk:1.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "822E865A-168C-4F82-95C7-B1752575C175"}, {"criteria": "cpe:2.3:a:imaginationtech:ddk:23.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F512C3D-CF11-492B-8CAB-CF51965F4250"}], "operator": "OR"}]}], "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce"}