« Volver al listado

CVE-2026-21734

Estado: AnalizadaAlta (7.7)—

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.

An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso local (AV:L) sin interacción permite escalada de privilegios. Out-of-bounds write en compilador GPU con privilegios del sistema causa DoS y potencial ejecución con elevación.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramFilter Network TrafficExecution PreventionApplication Isolation and SandboxingExploit ProtectionUpdate Software

Tecnologías afectadas (1)

Imaginationtech — DDK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-21734",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-21734",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-06-26T19:12:05.663656Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.7,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "affectedData": [
        {
          "vendor": "Imagination Technologies",
          "product": "Graphics DDK",
          "versions": [
            {
              "status": "affected",
              "version": "1.18 RTM",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "23.2 RTM",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.1 RTM",
              "versionType": "custom",
              "lessThanOrEqual": "24.2 RTM"
            },
            {
              "status": "affected",
              "version": "25.1 RTM",
              "versionType": "custom",
              "lessThanOrEqual": "25.3 RTM"
            },
            {
              "status": "unaffected",
              "version": "26.1 RTM",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Linux",
            "Android"
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2026-06-26T16:16:30.557",
  "references": [
    {
      "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
      "description": [
        {
          "lang": "en",
          "value": "CWE-823"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\n\n\nAn edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write."
    }
  ],
  "lastModified": "2026-06-29T18:44:35.690",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:imaginationtech:ddk:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D75CD5B-2B2E-44C9-8422-D808630103B4",
              "versionEndIncluding": "25.2"
            },
            {
              "criteria": "cpe:2.3:a:imaginationtech:ddk:25.3:rtm:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B3E39FF-6C96-4A0B-9CE1-595C785DF920"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce"
}