QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-34193

Back to search

CVE-2026-34193

Published: Jun 1, 2026

Modified: Jun 1, 2026

PUBLISHED

Description

Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host (Kernel) to perform arbitrary writes to firmware memory.

VendorProductVersions

Imagination Technologies

Graphics DDK

affected
1.18 RTM
affected
23.2 RTM
affected
24.2 RTM
affected
25.1 RTM - <= 25.3 RTM
affected
26.1 RTM1

+1 more versions

Weaknesses (CWE)

CWE-823

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now