CVE-2026-41157

{
  "id": "CVE-2026-41157",
  "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
  "published": "2026-06-12T22:16:50.583",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash.\n\n\n\nThe software computes a required memory size from untrusted input, but integer overflow can produce a value smaller than needed. Subsequent write operations may then occur past the intended memory boundary, corrupting adjacent memory and causing process instability or termination."
    },
    {
      "lang": "es",
      "value": "Una página web que contiene contenido WebGPU inusual cargado en el proceso de renderizado GLES de la GPU y puede desencadenar una escritura fuera de límites en el controlador de espacio de usuario de la GPU, lo que lleva a la corrupción de memoria y un posible fallo del proceso del navegador/GPU.\n\nEl software calcula un tamaño de memoria requerido a partir de una entrada no confiable, pero el desbordamiento de entero puede producir un valor menor al necesario. Las operaciones de escritura posteriores pueden entonces ocurrir más allá del límite de memoria previsto, corrompiendo la memoria adyacente y causando inestabilidad o terminación del proceso."
    }
  ],
  "affected": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "affectedData": [
        {
          "vendor": "Imagination Technologies",
          "product": "Graphics DDK",
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Android"
          ],
          "versions": [
            {
              "version": "1.18 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "23.2 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "24.2 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "25.1 RTM",
              "lessThanOrEqual": "25.3 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.1 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.2 RTM",
              "versionType": "custom",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-15T00:00:00+00:00",
          "id": "CVE-2026-41157",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
    }
  ]
}