Graphics ddk
This hub aggregates every CVE we track for Graphics ddk, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.
82
CVEs tracked
6
Critical
59
High
0
In CISA KEV
Severity distribution
HIGH59MEDIUM15CRITICAL6LOW2
Monthly trend
0
1
3
5
12
4
4
3
2
4
1
3
2
0
2
1
5
0
3
1
3
11
9
3
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Graphics ddk.
- CVE-2026-49746GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem7.1
- CVE-2026-45204GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory5.5
- CVE-2026-45198GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted7.8
- CVE-2026-16280GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset9.8
- CVE-2026-49745GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 07.8
- CVE-2026-49744GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()7.8
- CVE-2026-49743GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed7.8
- CVE-2026-45203GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOU7.8
- CVE-2026-45196GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel7.8
- CVE-2026-7639GPU DDK - Page UAF read in PMMETA_PROTECT heap memory7.8
- CVE-2026-41154GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse7.8
- CVE-2026-34196GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem7.8
- CVE-2026-45195GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted7.8
- CVE-2026-21734GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation7.7
- CVE-2026-41156GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding reference7.7
Product normalization is registry-driven with AI assist and human review. How it works