CVE-2026-74915

Full vulnerability record from the local CVENow database.

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

367425dc-4d06-4041-9650-c2dc6aaa27ce

Published

2026-10-30 02:17:09.850000

Last modified

2026-10-30 02:17:09.850000

View original CVE JSON

{
  "id": "CVE-2026-74915",
  "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
  "published": "2026-10-30T02:17:09.850",
  "lastModified": "2026-10-30T02:17:09.850",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device."
    }
  ],
  "affected": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "affectedData": [
        {
          "vendor": "Imagination Technologies",
          "product": "Graphics DDK",
          "defaultStatus": "unknown",
          "platforms": [
            "Linux",
            "Android"
          ],
          "versions": [
            {
              "version": "1.18 RTM2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "23.2 RTM2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "24.2 RTM2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "25.1 RTM2",
              "lessThanOrEqual": "25.3 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.1 RTM2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.2 RTM",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "26.3 RTM",
              "versionType": "custom",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-823"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
    }
  ]
}