CVE-2026-21734

{
  "id": "CVE-2026-21734",
  "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
  "published": "2026-06-26T16:16:30.557",
  "lastModified": "2026-10-25T17:10:00.197",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\n\n\nAn edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write."
    },
    {
      "lang": "es",
      "value": "Una página web que contiene código de sombreador (shader) de GPU inusual se carga en el proceso del compilador de GPU y puede desencadenar un fallo por escritura fuera de límites en la biblioteca del compilador de sombreadores (shader) de GPU. En ciertas plataformas, cuando el proceso del compilador tiene privilegios de sistema, esto podría permitir explotaciones adicionales en el dispositivo.\n\nUn caso límite que utiliza un valor muy pequeño en el código de sombreador (shader) de GPU puede causar un fallo de segmentación en el compilador de sombreadores (shader) de GPU debido a una escritura fuera de límites."
    }
  ],
  "affected": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "affectedData": [
        {
          "vendor": "Imagination Technologies",
          "product": "Graphics DDK",
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Android"
          ],
          "versions": [
            {
              "version": "1.18 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "23.2 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "24.1 RTM",
              "lessThanOrEqual": "24.2 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "25.1 RTM",
              "lessThanOrEqual": "25.3 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.1 RTM",
              "versionType": "custom",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "baseScore": 7.7,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-26T19:12:05.663656Z",
          "id": "CVE-2026-21734",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-823"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "25.2",
              "matchCriteriaId": "1D75CD5B-2B2E-44C9-8422-D808630103B4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:imaginationtech:ddk:25.3:rtm:*:*:*:*:*:*",
              "matchCriteriaId": "6B3E39FF-6C96-4A0B-9CE1-595C785DF920"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}